CVE-2010-5194

Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0, Gold…

published August 31, 2012

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

⚠️ A stack-based buffer overflow is lurking in the Image2PDF function of the SCRIBBLE.ScribbleCtrl.1 ActiveX control — an open invitation for crafty attackers! 🔥 Think of this vulnerability like a waiter who accepts an oversized order without checking if the table can handle it. When they keep piling on more and more, eventually the stack collapses, spilling everything everywhere! If exploited, an attacker could send a specially crafted long parameter, allowing them to execute arbitrary code on the system. This could lead to unauthorized access to sensitive data and even total system control, turning your computer into a playground for cyber mischief!

Put simply

Think of this vulnerability like a waiter who accepts an oversized order without checking if the table can handle it. When they keep piling on more and more, eventually the stack collapses, spilling everything everywhere! The vulnerability arises from insufficient input validation in the Image2PDF function of the ActiveX control, allowing attackers to manipulate memory and execute arbitrary code by sending a long strPDFFile parameter.

What to do

If exploited, an attacker could send a specially crafted long parameter, allowing them to execute arbitrary code on the system. This could lead to unauthorized access to sensitive data and even total system control, turning your computer into a playground for cyber mischief! To protect against this vulnerability, ensure you're running the latest version of Viscom Image Viewer, which has patched this issue. Additionally, consider disabling ActiveX controls if they're not necessary for your operations. You've got this! Keep your systems updated and secure, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06343 · 93.6th percentile
Published
2012-08-31T21:00Z
EPSS history
Timeline
  • 31 AUG 21:00Z
    Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0, Gold…
    cvelistv5