SmartCode ServerX VNC Server control is a VNC server implemented as an ActiveX component, which makes it extremely easy for you to integrate VNC support into your Web or desktop applications. In the simplest scenario, you would add the ServerX ActiveX component to your project, place the ServerX instance in a form, and modify the ActiveX properties if desired. That's it - you just created an application with a VNC Server embedded in it.
The vulnerability exist in the CSC_ServerXControl class with all its members. When parsing overly long string while listening for incoming connection the application crashes along with IE, corrupting the memory.