CVE-2013-10057

CVE-2013-10057 is a stack-based buffer overflow in the Synactis PDF In-The-Box ActiveX control (PDF_IN_1.ocx), specifically within the ConnectToSynactis method. This vulnerability allows remote attackers to execute arbitrary code by tricking users into visiting a malicious webpage that instantiates the vulnerable control, as seen in third-party software like Logic Print 2013. The vulnerability carries a CVSS score of 7.5 (HIGH), indicating a critical risk. It can be exploited remotely with low attack complexity, leading to high impact on confidentiality, integrity, and availability. User interaction is required for successful exploitation. While not listed on the KEV catalog, a Metasploit module exists for this vulnerability, confirming exploit code availability. The high EPSS score and significant community discussion (12 mentions) suggest considerable interest and potential for exploitation, despite no active exploitation being reported.