Attackers could exploit these issues to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer) or cause a denial -of-service condition.
Vendor Status:
Samsung had issued an update for this vulnerability