The vulnerability exists within the AnnotateX ActiveX control's Insert property. This module runs a web server waiting for vulnerable clients (Internet Explorer 8 and 9) to connect to it.
CVE Link
Exploit Platform
Exploit Type
Product Name