CVE-2008-4391

Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/33032
http://www.kb.cert.org/vuls/id/639345	Patch US Government Resource
http://www.kb.cert.org/vuls/id/WDON-7M2U52	US Government Resource
http://www.securityfocus.com/bid/32665

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:cisco:wvc54gc::::::::
	cpe:2.3:h:cisco:wvc54gc:1.15:::::::*

History

No history.

Information

Published : 2008-12-09 00:30

Updated : 2024-02-04 17:33

NVD link : CVE-2008-4391

Mitre link : CVE-2008-4391

CVE.ORG link : CVE-2008-4391

JSON object : View

Products Affected

cisco

wvc54gc

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2008-4391", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2008-12-09T00:30:00.267", "references": [{"url": "http://secunia.com/advisories/33032", "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/639345", "tags": ["Patch", "US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/WDON-7M2U52", "tags": ["US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/bid/32665", "source": "cret@cert.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en el m\u00e9todo SetSource del control ActiveX CamPlayerWeb11gv2 de NetCamPlayerWeb11gv2.ocx en la c\u00e1mara de v\u00eddeo sin cables Cisco Linksys WVC54GC anterior al software empotrado (firmware) v1.25; permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de argumentos largos no v\u00e1lidos."}], "lastModified": "2009-08-20T05:21:16.820", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wvc54gc:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C882AB42-F04C-4968-A9C9-035A7411153E", "versionEndIncluding": "1.19"}, {"criteria": "cpe:2.3:h:cisco:wvc54gc:1.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39AE4F03-2623-476F-BFBF-5D458432BAEC"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}