Sony Network Camera ActiveX Control Unspecified Buffer Overflow Vulnerability
BID:33876
Info
Sony Network Camera ActiveX Control Unspecified Buffer Overflow Vulnerability
| Bugtraq ID: | 33876 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 24 2009 12:00AM |
| Updated: | Feb 24 2009 08:27PM |
| Credit: | Sony |
| Vulnerable: |
Sony Network Camera SNC-RZ50N 2.21 Sony Network Camera SNC-RZ25N 1.29 Sony Network Camera SNC-RX570N/W 3.0 Sony Network Camera SNC-RX570N/W 2.30 Sony Network Camera SNC-RX570N/B 3.0 Sony Network Camera SNC-RX570N/B 2.30 Sony Network Camera SNC-RX550N/W 3.0 Sony Network Camera SNC-RX550N/W 2.30 Sony Network Camera SNC-RX550N/B 3.0 Sony Network Camera SNC-RX550N/B 2.30 Sony Network Camera SNC-RX530N/W 3.0 Sony Network Camera SNC-RX530N/W 2.30 Sony Network Camera SNC-RX530N/B 3.0 Sony Network Camera SNC-RX530N/B 2.30 Sony Network Camera SNC-P5 1.28 Sony Network Camera SNC-P5 1.0 Sony Network Camera SNC-P1 1.28 Sony Network Camera SNC-DF85N 1.11 Sony Network Camera SNC-DF80N 1.11 Sony Network Camera SNC-DF70N 1.17 Sony Network Camera SNC-DF50N 1.11 Sony Network Camera SNC-DF40N 1.17 Sony Network Camera SNC-CS50N 2.21 Sony Network Camera SNC-CS11 1.05 Sony Network Camera SNC-CS10 1.05 |
| Not Vulnerable: |
Sony Network Camera SNC-RZ50N 2.22 Sony Network Camera SNC-RZ25N 1.30 Sony Network Camera SNC-RX570N/W 3.01 Sony Network Camera SNC-RX570N/W 2.31 Sony Network Camera SNC-RX570N/B 3.01 Sony Network Camera SNC-RX570N/B 2.31 Sony Network Camera SNC-RX550N/W 3.01 Sony Network Camera SNC-RX550N/W 2.31 Sony Network Camera SNC-RX550N/B 3.01 Sony Network Camera SNC-RX550N/B 2.31 Sony Network Camera SNC-RX530N/W 3.01 Sony Network Camera SNC-RX530N/W 2.31 Sony Network Camera SNC-RX530N/B 3.01 Sony Network Camera SNC-RX530N/B 2.31 Sony Network Camera SNC-P5 1.29 Sony Network Camera SNC-P1 1.29 Sony Network Camera SNC-DF85N 1.12 Sony Network Camera SNC-DF80N 1.12 Sony Network Camera SNC-DF70N 1.18 Sony Network Camera SNC-DF50N 1.12 Sony Network Camera SNC-DF40N 1.18 Sony Network Camera SNC-CS50N 2.22 Sony Network Camera SNC-CS11 1.06 Sony Network Camera SNC-CS10 1.06 |
Discussion
Sony Network Camera ActiveX Control Unspecified Buffer Overflow Vulnerability
Sony Network Camera ActiveX control is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.
Sony Network Camera ActiveX control is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.
Exploit / POC
Sony Network Camera ActiveX Control Unspecified Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sony Network Camera ActiveX Control Unspecified Buffer Overflow Vulnerability
Solution:
The vendor has released firmware updates. Please contact the vendor for details.
Solution:
The vendor has released firmware updates. Please contact the vendor for details.
References
Sony Network Camera ActiveX Control Unspecified Buffer Overflow Vulnerability
References:
References: