Schneider Electric Multiple Products DTM libraries Buffer Overflow Exploit

The vulnerability exists within the isObjectModel ActiveX control's RemoveParameter property. This module runs a web server waiting for vulnerable clients (Internet Explorer 6, 7, 8, 9) to connect to it.