CVE-2010-5193

2012-08-3121:55:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.945

Percentile

99.3%

JSON

Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter.

Affected configurations

Nvd

Node

viscomsoftimage_viewer_cp_gold_sdkMatch6.0

viscomsoftimage_viewer_cp_pro_sdkMatch8.0

VendorProductVersionCPE
viscomsoftimage_viewer_cp_gold_sdk6.0cpe:2.3:a:viscomsoft:image_viewer_cp_gold_sdk:6.0:*:*:*:*:*:*:*
viscomsoftimage_viewer_cp_pro_sdk8.0cpe:2.3:a:viscomsoft:image_viewer_cp_pro_sdk:8.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
viscomsoft	image_viewer_cp_gold_sdk	6.0	cpe:2.3:a:viscomsoft:image_viewer_cp_gold_sdk:6.0:::::::*
viscomsoft	image_viewer_cp_pro_sdk	8.0	cpe:2.3:a:viscomsoft:image_viewer_cp_pro_sdk:8.0:::::::*