VAR-200705-0167
Vulnerability from variot - Updated: 2023-12-18 12:39Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument. Axis Camera Control is prone to a buffer-overflow vulnerability because it fails to sufficiently bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Axis Camera Control versions prior to 2.40.0.0 are vulnerable to this issue.
Try a new way to discover vulnerabilities that ALREADY EXIST in your IT infrastructure.
Join the FREE BETA test of the Network Software Inspector (NSI)! http://secunia.com/network_software_inspector/
The NSI enables you to INSPECT, DISCOVER, and DOCUMENT vulnerabilities in more than 4,000 different Windows applications.
The vulnerability is caused due to a boundary error when handling the "SaveBMP()" method and can be exploited to cause a stack-based buffer overflow via an overly long argument.
Successful exploitation allows execution of arbitrary code.
SOLUTION: Update to version 2.40.0.0 or later. http://www.axis.com/techsup/software/acc/files/AXISCameraControl.zip
PROVIDED AND/OR DISCOVERED BY: Will Dormann, CERT/CC.
ORIGINAL ADVISORY: Axis Communications: http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf
US-CERT VU#355809: http://www.kb.cert.org/vuls/id/355809
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200705-0167",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "2411 video server",
"scope": "lte",
"trust": 1.0,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2420 network camera",
"scope": "lte",
"trust": 1.0,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2130 ptz network camera",
"scope": "lte",
"trust": 1.0,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2401 video server",
"scope": "lte",
"trust": 1.0,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2110 network camera",
"scope": "lte",
"trust": 1.0,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2420-ir network camera",
"scope": "lte",
"trust": 1.0,
"vendor": "axis",
"version": "2.39"
},
{
"model": "panorama ptz camera",
"scope": "lte",
"trust": 1.0,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2400 video server",
"scope": "lte",
"trust": 1.0,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2120 network camera",
"scope": "lte",
"trust": 1.0,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2100 network camera",
"scope": "lte",
"trust": 1.0,
"vendor": "axis",
"version": "2.39"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "axis",
"version": null
},
{
"model": "2100 network camera",
"scope": "lt",
"trust": 0.8,
"vendor": "axis",
"version": "2.40.0.0"
},
{
"model": "2110 network camera",
"scope": "lt",
"trust": 0.8,
"vendor": "axis",
"version": "2.40.0.0"
},
{
"model": "2120 network camera",
"scope": "lt",
"trust": 0.8,
"vendor": "axis",
"version": "2.40.0.0"
},
{
"model": "2130 ptz network camera",
"scope": "lt",
"trust": 0.8,
"vendor": "axis",
"version": "2.40.0.0"
},
{
"model": "2400 video server",
"scope": "lt",
"trust": 0.8,
"vendor": "axis",
"version": "2.40.0.0"
},
{
"model": "2401 video server",
"scope": "lt",
"trust": 0.8,
"vendor": "axis",
"version": "2.40.0.0"
},
{
"model": "2411 video server",
"scope": "lt",
"trust": 0.8,
"vendor": "axis",
"version": "2.40.0.0"
},
{
"model": "2420 network camera",
"scope": "lt",
"trust": 0.8,
"vendor": "axis",
"version": "2.40.0.0"
},
{
"model": "2420-ir network camera",
"scope": "lt",
"trust": 0.8,
"vendor": "axis",
"version": "2.40.0.0"
},
{
"model": "panorama ptz camera",
"scope": "lt",
"trust": 0.8,
"vendor": "axis",
"version": "2.40.0.0"
},
{
"model": "2130 ptz network camera",
"scope": "eq",
"trust": 0.6,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2401 video server",
"scope": "eq",
"trust": 0.6,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2120 network camera",
"scope": "eq",
"trust": 0.6,
"vendor": "axis",
"version": "2.39"
},
{
"model": "panorama ptz camera",
"scope": "eq",
"trust": 0.6,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2411 video server",
"scope": "eq",
"trust": 0.6,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2100 network camera",
"scope": "eq",
"trust": 0.6,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2420 network camera",
"scope": "eq",
"trust": 0.6,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2420-ir network camera",
"scope": "eq",
"trust": 0.6,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2400 video server",
"scope": "eq",
"trust": 0.6,
"vendor": "axis",
"version": "2.39"
},
{
"model": "2110 network camera",
"scope": "eq",
"trust": 0.6,
"vendor": "axis",
"version": "2.39"
},
{
"model": "communications camera control",
"scope": "eq",
"trust": 0.3,
"vendor": "axis",
"version": "0"
},
{
"model": "communications camera control",
"scope": "ne",
"trust": 0.3,
"vendor": "axis",
"version": "2.40.0"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#355809"
},
{
"db": "BID",
"id": "23816"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001883"
},
{
"db": "NVD",
"id": "CVE-2007-2239"
},
{
"db": "CNNVD",
"id": "CNNVD-200705-093"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:axis:2120_network_camera:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.39",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:h:axis:2130_ptz_network_camera:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.39",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:h:axis:2100_network_camera:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.39",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:h:axis:2110_network_camera:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.39",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:h:axis:panorama_ptz_camera:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.39",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:h:axis:2411_video_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.39",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:h:axis:2420-ir_network_camera:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.39",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:h:axis:2420_network_camera:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.39",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:h:axis:2400_video_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.39",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:h:axis:2401_video_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.39",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2007-2239"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Will Dormann of CERT/CC discovered this issue.",
"sources": [
{
"db": "BID",
"id": "23816"
},
{
"db": "CNNVD",
"id": "CNNVD-200705-093"
}
],
"trust": 0.9
},
"cve": "CVE-2007-2239",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"obtainAllPrivilege": true,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 9.3,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "CVE-2007-2239",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "VHN-25601",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2007-2239",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#355809",
"trust": 0.8,
"value": "7.75"
},
{
"author": "CNNVD",
"id": "CNNVD-200705-093",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-25601",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#355809"
},
{
"db": "VULHUB",
"id": "VHN-25601"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001883"
},
{
"db": "NVD",
"id": "CVE-2007-2239"
},
{
"db": "CNNVD",
"id": "CNNVD-200705-093"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument. Axis Camera Control is prone to a buffer-overflow vulnerability because it fails to sufficiently bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. \nAxis Camera Control versions prior to 2.40.0.0 are vulnerable to this issue. \n\n----------------------------------------------------------------------\n\nTry a new way to discover vulnerabilities that ALREADY EXIST in your\nIT infrastructure. \n\nJoin the FREE BETA test of the Network Software Inspector (NSI)!\nhttp://secunia.com/network_software_inspector/\n\nThe NSI enables you to INSPECT, DISCOVER, and DOCUMENT\nvulnerabilities in more than 4,000 different Windows applications. \n\nThe vulnerability is caused due to a boundary error when handling the\n\"SaveBMP()\" method and can be exploited to cause a stack-based buffer\noverflow via an overly long argument. \n\nSuccessful exploitation allows execution of arbitrary code. \n\nSOLUTION:\nUpdate to version 2.40.0.0 or later. \nhttp://www.axis.com/techsup/software/acc/files/AXISCameraControl.zip\n\nPROVIDED AND/OR DISCOVERED BY:\nWill Dormann, CERT/CC. \n\nORIGINAL ADVISORY:\nAxis Communications:\nhttp://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf\n\nUS-CERT VU#355809:\nhttp://www.kb.cert.org/vuls/id/355809\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2007-2239"
},
{
"db": "CERT/CC",
"id": "VU#355809"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001883"
},
{
"db": "BID",
"id": "23816"
},
{
"db": "VULHUB",
"id": "VHN-25601"
},
{
"db": "PACKETSTORM",
"id": "56473"
}
],
"trust": 2.79
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-25601",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-25601"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#355809",
"trust": 3.7
},
{
"db": "NVD",
"id": "CVE-2007-2239",
"trust": 2.8
},
{
"db": "SECUNIA",
"id": "25093",
"trust": 2.7
},
{
"db": "BID",
"id": "23816",
"trust": 2.0
},
{
"db": "OSVDB",
"id": "35602",
"trust": 1.7
},
{
"db": "VUPEN",
"id": "ADV-2007-1663",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001883",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200705-093",
"trust": 0.7
},
{
"db": "XF",
"id": "34133",
"trust": 0.6
},
{
"db": "EXPLOIT-DB",
"id": "4143",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-25601",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "56473",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#355809"
},
{
"db": "VULHUB",
"id": "VHN-25601"
},
{
"db": "BID",
"id": "23816"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001883"
},
{
"db": "PACKETSTORM",
"id": "56473"
},
{
"db": "NVD",
"id": "CVE-2007-2239"
},
{
"db": "CNNVD",
"id": "CNNVD-200705-093"
}
]
},
"id": "VAR-200705-0167",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-25601"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T12:39:48.234000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.axis.com/techsup/software/acc/index.htm"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-001883"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2007-2239"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.9,
"url": "http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf"
},
{
"trust": 2.9,
"url": "http://www.kb.cert.org/vuls/id/355809"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/25093/"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/23816"
},
{
"trust": 1.7,
"url": "http://osvdb.org/35602"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/25093"
},
{
"trust": 1.1,
"url": "http://support.microsoft.com/kb/240797"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2007/1663"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34133"
},
{
"trust": 0.8,
"url": "http://www.axis.com/techsup/software/acc/index.htm"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-2239"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-2239"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/34133"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2007/1663"
},
{
"trust": 0.3,
"url": "http://www.se.axis.com/techsup/cdsrv/storpoint_cd/index.html"
},
{
"trust": 0.3,
"url": "http://www.axis.com/products/camera_servers/index.htm"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/network_software_inspector/"
},
{
"trust": 0.1,
"url": "http://www.axis.com/techsup/software/acc/files/axiscameracontrol.zip"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/14131/"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#355809"
},
{
"db": "VULHUB",
"id": "VHN-25601"
},
{
"db": "BID",
"id": "23816"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001883"
},
{
"db": "PACKETSTORM",
"id": "56473"
},
{
"db": "NVD",
"id": "CVE-2007-2239"
},
{
"db": "CNNVD",
"id": "CNNVD-200705-093"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#355809"
},
{
"db": "VULHUB",
"id": "VHN-25601"
},
{
"db": "BID",
"id": "23816"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001883"
},
{
"db": "PACKETSTORM",
"id": "56473"
},
{
"db": "NVD",
"id": "CVE-2007-2239"
},
{
"db": "CNNVD",
"id": "CNNVD-200705-093"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-05-04T00:00:00",
"db": "CERT/CC",
"id": "VU#355809"
},
{
"date": "2007-05-07T00:00:00",
"db": "VULHUB",
"id": "VHN-25601"
},
{
"date": "2007-05-04T00:00:00",
"db": "BID",
"id": "23816"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-001883"
},
{
"date": "2007-05-04T15:30:32",
"db": "PACKETSTORM",
"id": "56473"
},
{
"date": "2007-05-07T19:19:00",
"db": "NVD",
"id": "CVE-2007-2239"
},
{
"date": "2007-05-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200705-093"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-06-14T00:00:00",
"db": "CERT/CC",
"id": "VU#355809"
},
{
"date": "2017-07-29T00:00:00",
"db": "VULHUB",
"id": "VHN-25601"
},
{
"date": "2007-07-03T22:37:00",
"db": "BID",
"id": "23816"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-001883"
},
{
"date": "2017-07-29T01:31:19.253000",
"db": "NVD",
"id": "CVE-2007-2239"
},
{
"date": "2007-05-14T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200705-093"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200705-093"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Axis Communications CamImage ActiveX control stack buffer overflow",
"sources": [
{
"db": "CERT/CC",
"id": "VU#355809"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200705-093"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…