IBM SPSS SamplePower C1sizer ActiveX Control Buffer Overflow Exploit

A vulnerability exists in C1sizer.ocx when handling the TabCaption buffer: C1sizer.ocx does not properly check the size before running lstrcatA and therefore will cause a buffer overflow. This module runs a web server waiting for vulnerable clients (Internet Explorer) to connect to it.