Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant as used in Norton AntiVirus Internet Security and System Works 2005 and 2006 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.