CVE-2007-2239

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2007-2239
Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument.

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://osvdb.org/35602
http://secunia.com/advisories/25093 Patch Vendor Advisory
http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf Vendor Advisory
http://www.kb.cert.org/vuls/id/355809 US Government Resource
http://www.securityfocus.com/bid/23816
http://www.vupen.com/english/advisories/2007/1663
https://exchange.xforce.ibmcloud.com/vulnerabilities/34133
http://osvdb.org/35602
http://secunia.com/advisories/25093 Patch Vendor Advisory
http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf Vendor Advisory
http://www.kb.cert.org/vuls/id/355809 US Government Resource
http://www.securityfocus.com/bid/23816
http://www.vupen.com/english/advisories/2007/1663
https://exchange.xforce.ibmcloud.com/vulnerabilities/34133
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:axis:2100_network_camera:*:*:*:*:*:*:*:*
cpe:2.3:h:axis:2110_network_camera:*:*:*:*:*:*:*:*
cpe:2.3:h:axis:2120_network_camera:*:*:*:*:*:*:*:*
cpe:2.3:h:axis:2130_ptz_network_camera:*:*:*:*:*:*:*:*
cpe:2.3:h:axis:2400_video_server:*:*:*:*:*:*:*:*
cpe:2.3:h:axis:2401_video_server:*:*:*:*:*:*:*:*
cpe:2.3:h:axis:2411_video_server:*:*:*:*:*:*:*:*
cpe:2.3:h:axis:2420-ir_network_camera:*:*:*:*:*:*:*:*
cpe:2.3:h:axis:2420_network_camera:*:*:*:*:*:*:*:*
cpe:2.3:h:axis:panorama_ptz_camera:*:*:*:*:*:*:*:*
History

21 Nov 2024, 00:30

Type Values Removed Values Added
References () http://osvdb.org/35602 - () http://osvdb.org/35602 -
References () http://secunia.com/advisories/25093 - Patch, Vendor Advisory () http://secunia.com/advisories/25093 - Patch, Vendor Advisory
References () http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf - Vendor Advisory () http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf - Vendor Advisory
References () http://www.kb.cert.org/vuls/id/355809 - US Government Resource () http://www.kb.cert.org/vuls/id/355809 - US Government Resource
References () http://www.securityfocus.com/bid/23816 - () http://www.securityfocus.com/bid/23816 -
References () http://www.vupen.com/english/advisories/2007/1663 - () http://www.vupen.com/english/advisories/2007/1663 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/34133 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/34133 -
Information

Published : 2007-05-07 19:19

Updated : 2024-11-21 00:30

NVD link : CVE-2007-2239

Mitre link : CVE-2007-2239

CVE.ORG link : CVE-2007-2239

JSON object : View

Products Affected

axis

  • 2130_ptz_network_camera
  • 2100_network_camera
  • 2420_network_camera
  • 2401_video_server
  • 2420-ir_network_camera
  • 2120_network_camera
  • 2110_network_camera
  • 2400_video_server
  • panorama_ptz_camera
  • 2411_video_server
CWE
NVD-CWE-Other