CVE-2010-5194
Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0, Gold 5.5, Gold 6.0, and earlier allows remote attackers to execute arbitrary code via a long…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.34%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0, Gold 5.5, Gold 6.0, and earlier allows remote attackers to execute arbitrary code via a long strPDFFile parameter.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 6.34% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- viscomsoft/image viewer cp gold sdk · viscomsoft/image viewer cp pro sdk
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/42445Vendor Advisory
- http://www.exploit-db.com/exploits/15658Exploit
- http://www.osvdb.org/69566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63642
- http://secunia.com/advisories/42445Vendor Advisory
- http://www.exploit-db.com/exploits/15658Exploit
- http://www.osvdb.org/69566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63642
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.