CVE-2008-4729

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...

hummingbird-poc.txt

arg1="001101220123012401250126012701280129012:012;012012?012@012A012B012C012D012E012FXXXX" target.PlainTextPassword = arg1...