Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI on systems using ASCII versions allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function.