CVE-2010-5193

Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

31.97% chance of exploitation in the next 30 days, 98th percentile

Published

2012-08-31

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://www.exploit-db.com/exploits/15668
• http://www.exploit-db.com/exploits/18123

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/imgeviewer_tifme…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/18123
• https://www.exploit-db.com/exploits/15668

References

• CVE Record
• NVD entry

Related

• CVE-2010-5106
• CVE-2010-5194
• CVE-2010-5099
• CVE-2010-5195
• CVE-2010-5096
• CVE-2010-5201