rapid7/metasploit-framework — pull request #1916 by wchen-r7 (2013-06-07 01:08:22+00:00)
Title: Add OSVDB-93754: Synactis PDF In-The-Box ConnectToSynactic Stack Buffer ...

This module exploits a vulnerability found in Synactis' PDF In-The-Box ActiveX component, specifically PDF_IN_1.ocx. When a long string of data is given to the ConnectToSynactis function, which is meant to be used for the ldCmdLine argument of a WinExec call, a strcpy routine can end up overwriting a TRegistry class pointer saved on the stack, and results in arbitrary code execution under the context of the user.

I downloaded the component from Logic Print 2013, which can be found here:
http://www.logic-print.com/en/printestimatingsoftware.html

Or, ask me for the trial for testing.