CVE-2010-5194: Viscomsoft Image Viewer CP Gold SDK

High severity, CVSS 9.3. EPSS: 6.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0, Gold 5.5, Gold 6.0, and earlier allows remote attackers to execute arbitrary code via a long strPDFFile parameter.

Affected products

• Viscomsoft Image Viewer CP Gold SDK: version 5.5 only; version 6.0 only
• Viscomsoft Image Viewer CP Pro SDK: version 8.0 only

Published 2012-08-31. Last modified 2026-06-16.