Lorex Security DVR Edge Series 'INetViewX' ActiveX Control Buffer Overflow Vulnerability
BID:64783
Info
Lorex Security DVR Edge Series 'INetViewX' ActiveX Control Buffer Overflow Vulnerability
| Bugtraq ID: | 64783 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2014-1201 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 09 2014 12:00AM |
| Updated: | Jan 09 2014 12:00AM |
| Credit: | Pedro Ribeiro |
| Vulnerable: |
LOREX Technology Security DVR 0 |
| Not Vulnerable: | |
Discussion
Lorex Security DVR Edge Series 'INetViewX' ActiveX Control Buffer Overflow Vulnerability
Lorex Security DVR Edge series is prone to a remote buffer-overflow vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of an application (typically Internet Explorer) that uses the ActiveX control. Failed exploit attempts will result in a denial-of-service condition.
Lorex Security DVR Edge series is prone to a remote buffer-overflow vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of an application (typically Internet Explorer) that uses the ActiveX control. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
Lorex Security DVR Edge Series 'INetViewX' ActiveX Control Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Lorex Security DVR Edge Series 'INetViewX' ActiveX Control Buffer Overflow Vulnerability
References:
References:
- [CVE -2014-1201] Lorex security DVD ActiveX control buffer overflow (Pedro Ribeiro)
- Security DVR Homepage (Security DVR)