The Src, Background, PackageXml properties in the Autodesk IDrop Active-X control, IDrop.ocx version 17.1.51.160, can be manipulated to trigger a heap use after free condition resulting in arbitrary remote code execution.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/76308/autodesk-activex.txt
Source: https://packetstormsecurity.com/files/76308/Autodesk-IDrop-Active-X-Control.html