Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via long (1) UID (2) Opf (3) PAGENO (4) LaunchMode (5) SubID (6) BookID (7) LibraryID (8) SubURL and (9) LoadOpf properties.