Multiple IPUX IP Camera Products 'UltraSVCamX.ocx' Multiple Buffer Overflow Vulnerabilities
BID:71403
Info
Multiple IPUX IP Camera Products 'UltraSVCamX.ocx' Multiple Buffer Overflow Vulnerabilities
| Bugtraq ID: | 71403 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Dec 02 2014 12:00AM |
| Updated: | Dec 02 2014 12:00AM |
| Credit: | LiquidWorm |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Multiple IPUX IP Camera Products 'UltraSVCamX.ocx' Multiple Buffer Overflow Vulnerabilities
Multiple IPUX IP Camera products are prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit these issues to execute arbitrary code in the context of the system using an affected ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.
IPUX ICL5132 and ICL5452 are vulnerable.
Multiple IPUX IP Camera products are prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit these issues to execute arbitrary code in the context of the system using an affected ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.
IPUX ICL5132 and ICL5452 are vulnerable.
Exploit / POC
Multiple IPUX IP Camera Products 'UltraSVCamX.ocx' Multiple Buffer Overflow Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting user to view a specially crafted webpage.
To exploit these issues, an attacker must entice an unsuspecting user to view a specially crafted webpage.
Solution / Fix
Multiple IPUX IP Camera Products 'UltraSVCamX.ocx' Multiple Buffer Overflow Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Multiple IPUX IP Camera Products 'UltraSVCamX.ocx' Multiple Buffer Overflow Vulnerabilities
References:
References: