CVE-2007-2239

EPSS 11.8%

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/4143unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/35602 http://secunia.com/advisories/25093 https://exchange.xforce.ibmcloud.com/vulnerabilities/34133 http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf http://www.kb.cert.org/vuls/id/355809 http://www.securityfocus.com/bid/23816 http://www.vupen.com/english/advisories/2007/1663