{"id":"CVE-2010-5193","url":"https://www.cyber-defence.io/tools/cve/CVE-2010-5193","generatedAt":"2026-11-05T08:12:37.888Z","title":"Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit…","description":"Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter.","published":"2012-08-31T21:55:01.000Z","lastModified":"2026-06-16T23:26:18.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":9.3,"severity":"HIGH","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C"},"cwe":["CWE-119"],"affected":["viscomsoft/image viewer cp gold sdk","viscomsoft/image viewer cp pro sdk"],"epss":{"score":0.31968,"percentile":0.98314,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":2,"verified":true,"firstPublished":"2010-12-03","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":18123,"kind":"exploit","title":"Viscom Image Viewer CP Pro 8.0/Gold 6.0 - ActiveX Control (Metasploit)","url":"https://www.exploit-db.com/exploits/18123","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/18123.rb","file":"exploits/windows/remote/18123.rb","published":"2011-11-17","added":"2011-11-17","updated":"2011-11-17","author":"Metasploit","type":"remote","platform":"windows","port":null,"verified":true,"codes":["OSVDB-78102","CVE-2010-5194","CVE-2010-5193","OSVDB-69566"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"http://secunia.com/advisories/42445/"},{"edbId":15668,"kind":"exploit","title":"Viscom Image Viewer CP Gold 6 - ActiveX 'TifMergeMultiFiles()' Remote Buffer Overflow","url":"https://www.exploit-db.com/exploits/15668","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/15668.html","file":"exploits/windows/remote/15668.html","published":"2010-12-03","added":"2010-12-03","updated":"2016-10-27","author":"Dr_IDE","type":"remote","platform":"windows","port":null,"verified":true,"codes":["OSVDB-78102","CVE-2010-5193"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":"http://www.exploit-db.com/screenshots/idlt16000/15668.png","referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 32.0%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://secunia.com/advisories/42445","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/15668","source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/18123","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/63666","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42445","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/15668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/18123","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/63666","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-5193","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}