Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95 and possibly other versions before 4.29 allow remote attackers to execute arbitrary code via a long (1) KeyString property (2) NewPath parameter to the SetLocalIniFilePath method or (3) NewPortPath parameter to the SetTabletPortPath method.