Secunia Research has discovered a vulnerability in TSC2 Help Desk, which can be exploited by malicious people to potentially compromise a user’s system. The vulnerability is caused due to a boundary error in the included CTab ActiveX control (c1sizer.ocx) when copying tab captions. This can be exploited to cause a heap-based buffer overflow by e.g. adding multiple tabs via the “AddTab()” method. Successful exploitation may allow execution of arbitrary code. TSC2 Help Desk version 4.1.8 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/73653/secunia-tsc2.txt
Source: https://packetstormsecurity.com/files/73653/TSC2-Help-Desk-CTab-ActiveX-Control-Buffer-Overflow.html