Andrew Christensen

A heap-based buffer overflow issue exists in the SendChannelData function within wfica.ocx. This allows remote malicious websites to execute arbitrary code by manipulating the `DataSize` parameter to be less than the length of the `Data` buffer.

The issue allows remote attackers to gain privileges due to the use of a default password for the `sa` account in the underlying HSQLDB database and lack of access restriction to the local machine.