AXIS Camera Control ActiveX Control 'image_pan_tilt' Buffer Overflow Vulnerability
BID:33408
Info
AXIS Camera Control ActiveX Control 'image_pan_tilt' Buffer Overflow Vulnerability
| Bugtraq ID: | 33408 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-5260 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 19 2009 12:00AM |
| Updated: | Feb 02 2009 02:39PM |
| Credit: | Alin Rad Pop, Secunia Research |
| Vulnerable: |
Axis Communications Camera Control 2.40 .0 |
| Not Vulnerable: | |
Discussion
AXIS Camera Control ActiveX Control 'image_pan_tilt' Buffer Overflow Vulnerability
AXIS Camera Control ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input.
An attacker can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.
Axis Camera Control 2.40.0.0 is vulnerable; other versions may also be vulnerable.
AXIS Camera Control ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input.
An attacker can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.
Axis Camera Control 2.40.0.0 is vulnerable; other versions may also be vulnerable.
Exploit / POC
AXIS Camera Control ActiveX Control 'image_pan_tilt' Buffer Overflow Vulnerability
A working commercial exploit is available through VUPEN Security. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through VUPEN Security. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
AXIS Camera Control ActiveX Control 'image_pan_tilt' Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
AXIS Camera Control ActiveX Control 'image_pan_tilt' Buffer Overflow Vulnerability
References:
References:
- AXIS Camera Control 'image_pan_tilt' Property Buffer Overflow (Secunia)
- Network Camera and Video Servers (Axis Communications)
- Secunia Research: AXIS Camera Control 'image_pan_tilt' Property Buffer Overflow (Secunia Research
- AXIS Camera Control ActiveX Update (AXIS)