Lucene search

K
cveMitreCVE-2010-5193
HistoryAug 31, 2012 - 9:55 p.m.

CVE-2010-5193

2012-08-3121:55:00
CWE-119
mitre
web.nvd.nist.gov
20
cve
2010
5193
stack-based buffer overflow
tifmergemultifiles
scribble.scribblectrl.1
activex control
viscom image viewer cp pro
gold 6.0
remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

High

EPSS

0.945

Percentile

99.3%

Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter.

Affected configurations

Nvd
Node
viscomsoftimage_viewer_cp_gold_sdkMatch6.0
OR
viscomsoftimage_viewer_cp_pro_sdkMatch8.0
VendorProductVersionCPE
viscomsoftimage_viewer_cp_gold_sdk6.0cpe:2.3:a:viscomsoft:image_viewer_cp_gold_sdk:6.0:*:*:*:*:*:*:*
viscomsoftimage_viewer_cp_pro_sdk8.0cpe:2.3:a:viscomsoft:image_viewer_cp_pro_sdk:8.0:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

High

EPSS

0.945

Percentile

99.3%