CVE-2010-4597

CVE-2010-4597 describes a critical stack-based buffer overflow vulnerability in the IntegraXor.Project ActiveX control (igcomm.dll) within Ecava IntegraXor Human-Machine Interface (HMI) software prior to version 3.5.3900.10. This flaw allows remote, unauthenticated attackers to execute arbitrary code with maximum privileges by providing a specially crafted long string to the save method. With a CVSS score of 10.0, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, a Proof-of-Concept exploit is publicly available on ExploitDB, indicating its exploitability, though there is no evidence of active exploitation or significant community discussion.