Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the (1) BroadcastKey (2) BroadcastKeyFileURL (3) Component (4) ComponentClassID (5) ComponentFileName (6) ExtraProperty (7) Properties (8) RequiredVersions (9) Source or (10) XMLText method.