iDefense Security Advisory 04.02.07 – Remote exploitation of a buffer overflow vulnerability in an ActiveX control installed by Hewlett-Packard Mercury Quality Center could allow for the execution of arbitrary code. iDefense has confirmed this vulnerability in the control that is installed with the 9.0 version of Hewlett-Packard Mercury Quality Center. The vulnerable ActiveX control is version 9.1.0.4353.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/55557/04.02.07-1.txt
Source: https://packetstormsecurity.com/files/55557/iDEFENSE-Security-Advisory-2007-04-02.1.html