Multiple Vivotek IP Camera Products CVE-2013-1595 Remote Buffer Overflow Vulnerability

Bugtraq ID:	59573
Class:	Boundary Condition Error
CVE:	CVE-2013-1595
Remote:	Yes
Local:	No
Published:	Apr 29 2013 12:00AM
Updated:	Apr 29 2013 12:00AM
Credit:	Martin Rocha from Core Impact Pro Team
Vulnerable:	Vivotek PT7135 IP Camera 0400a Vivotek PT7135 IP Camera 0300a
Not Vulnerable:

Multiple Vivotek IP Camera Products CVE-2013-1595 Remote Buffer Overflow Vulnerability

Multiple Vivotek IP Camera products are prone to a remote buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the affected device. Failed attacks will cause denial-of-service conditions.

Multiple Vivotek IP Camera Products CVE-2013-1595 Remote Buffer Overflow Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/59573.py

Multiple Vivotek IP Camera Products CVE-2013-1595 Remote Buffer Overflow Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Vivotek IP Camera Products CVE-2013-1595 Remote Buffer Overflow Vulnerability

References:

• Vivotek Homepage (Vivotek )
  
• Vivotek IP Cameras Multiple Vulnerabilities (Core Security)