critical9.3Public exploit code
CVE-2010-5194
Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0, Gold…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Viscom Image Viewer CP Pro 8.0/Gold 6.0 - ActiveX Control (Metasploit)2011-11-17 · remote · windows · Verified
- Viscom Image Viewer CP Gold 5.5 - 'Image2PDF()' Remote Buffer Overflow (Metasploit)2010-12-02 · remote · windows
Impact
Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0, Gold 5.5, Gold 6.0, and earlier allows remote attackers to execute arbitrary code via a long strPDFFile parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Viscomsoft | Image Viewer Cp Gold Sdk | Versions 5.5, 6.0 |
| Viscomsoft | Image Viewer Cp Pro Sdk | Version 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/42445
- http://www.exploit-db.com/exploits/15658
- http://www.osvdb.org/69566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63642
- http://secunia.com/advisories/42445
- http://www.exploit-db.com/exploits/15658
- http://www.osvdb.org/69566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63642