@media(max-width:760px){.site-header{position:static;height:auto}.nav-shell{flex-wrap:wrap;height:auto;padding:12px 0}.nav-toggle{display:none}.nav-panel{position:static;display:flex;flex:0 0 100%;padding:10px 0 0;border:0;box-shadow:none}.nav-links a{min-height:42px}}

Public exploit · Metasploit Module

Viscom Image Viewer CP Pro 8.0/Gold 6.0 ActiveX Control

Published 03 March 2010Rocco Calvi

Exploit summary

A stack-based buffer overflow in the ImageViewer2.OCX ActiveX control exploited via an overly long argument to the TifMergeMultiFiles() method, enabling code execution with user privileges. The module bypasses DEP and ASLR protections on Windows XP IE8, Vista, and Windows 7.

Source & references

Rapid7 Module