eEye Digital Security has discovered a critical vulnerability in Juniper Networks SSL-VPN Client ActiveX Control. JuniperSetup.ocx ActiveX control is automatically loaded through the web interface of Juniper Networks SSL-VPN. There is an exploitable buffer overflow in the handling a parameter of ActiveX control that will allow a remote attacker to reliably overwrite the stack with arbitrary data and execute arbitrary code though the web browser.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45911/EEYEB-20060227.txt
Source: https://packetstormsecurity.com/files/45911/EEYEB-20060227.txt.html