CVE-2008-5260

Related Files

AXIS Camera Control Buffer Overflow

Posted Jan 23, 2009

Authored by Alin Rad Pop | Site secunia.com

Secunia Research has discovered a vulnerability in AXIS Camera Control, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the CamImage.CamImage.1 ActiveX control (AxisCamControl.ocx) and can be exploited to cause a heap-based buffer overflow by assigning an overly long string to the "image_pan_tilt" property. Successful exploitation allows execution of arbitrary code, but requires that the user is tricked into visiting and clicking a malicious web page. AXIS Camera Control version 2.40.0.0 is affected.

tags | advisory, web, overflow, arbitrary, activex

advisories | CVE-2008-5260

SHA-256 | f0b0180856e9a0262f48ee0884649b780536e52f07ec1f178af12b3043c2f323

Download | Favorite | View