Secunia Research has discovered a vulnerability in GIGABYTE Dldrv2 ActiveX Control, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused by missing input validation of the “item” argument passed to the “SetDLInfo()” method and can be exploited via array-indexing errors to corrupt memory. Successful exploitation allows execution of arbitrary code. GIGABYTE Dldrv2 ActiveX Control version 1.4.206.11 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/91879/secunia-gigaarray.txt
Source: https://packetstormsecurity.com/files/91879/GIGABYTE-Dldrv2-ActiveX-Control-Array-Indexing.html