CVE-2010-5193

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 32%

from disclosure to weapon0 days

Published on NVDAug 31

1st PoCDec 3

metasploitMar 3

exploitation probability

32%top 2% of all CVEs

observed exploitation

nono source reports it

4 public exploit(s)

Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/15668unverified cve_referencewww.exploit-db.com/exploits/18123unverified exploitdbwww.exploit-db.com/exploits/15668unverified exploitdbwww.exploit-db.com/exploits/18123unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/42445 https://exchange.xforce.ibmcloud.com/vulnerabilities/63666 http://www.exploit-db.com/exploits/15668 http://www.exploit-db.com/exploits/18123