CVE-2010-0679

CRITICAL 9.3CVE-2010-0679 · Published 22/02/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
chemview hyleos	`= 1.9.5.1`	No fix yet

Description

Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large number of white space characters in the filename argument to the (1) SaveasMolFile and (2) ReadMolFile methods.

References

osvdb.org/62276
packetstormsecurity.org/1002-advisories/chemviewx-overflow.txt · Exploit
packetstormsecurity.org/1002-exploits/hyleoschemview-heap.rb.txt · Exploit
secunia.com/advisories/38523 · Vendor Advisory
exploit-db.com/exploits/11422 · Exploit
security-assessment.com/files/advisories/2010-02-11_ChemviewX_Activex.pdf
securityfocus.com/bid/38225 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free