CVE-2013-10057 Details

A stack-based buffer overflow vulnerability has been identified in the Synactis PDF In-The-Box ActiveX control, specifically in the PDF_IN_1.ocx file. The issue arises in the ConnectToSynactis method, where a long string can be passed to the ldCmdLine argument, intended for a WinExec call. This creates a strcpy operation that overwrites a saved pointer to a TRegistry class on the stack, allowing remote attackers to execute arbitrary code in the context of the user. The vulnerability can be exploited by tricking the user into visiting a malicious webpage that loads the vulnerable ActiveX control. This issue was discovered through its exploitation in third-party software, such as Logic Print 2013.