Advisory: Lenovo/IBM ActiveX buffer overflow

CERT released the advisory for this, which I believe is not being fixed by Lenovo/IBM.

This ActiveX control comes preinstalled on many Lenovo systems, and is also downloaded from the main page of their support site. It’s a nasty stack-based buffer overflow, and enterprises and other consumers should consider how to workaround this.