critical9.3Public exploit code
CVE-2010-5193
Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Viscom Image Viewer CP Pro 8.0/Gold 6.0 - ActiveX Control (Metasploit)2011-11-17 · remote · windows · Verified
- Viscom Image Viewer CP Gold 6 - ActiveX 'TifMergeMultiFiles()' Remote Buffer Overflow2010-12-03 · remote · windows · Verified
Impact
Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Viscomsoft | Image Viewer Cp Gold Sdk | Version 6.0 |
| Viscomsoft | Image Viewer Cp Pro Sdk | Version 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/42445
- http://www.exploit-db.com/exploits/15668
- http://www.exploit-db.com/exploits/18123
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63666
- http://secunia.com/advisories/42445
- http://www.exploit-db.com/exploits/15668
- http://www.exploit-db.com/exploits/18123
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63666