The Chance-i DiViS-Web DVR System Active-X control suffers from a heap overflow vulnerability in AddSiteEx().