NetSight
IP …
critical9.3Public exploit code

CVE-2007-2239

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100,…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument.

Affected products

VendorProductAffected versions
Axis2100 Network Camera
through 2.39
Axis2110 Network Camera
through 2.39
Axis2120 Network Camera
through 2.39
Axis2130 Ptz Network Camera
through 2.39
Axis2400 Video Server
through 2.39
Axis2401 Video Server
through 2.39
Axis2411 Video Server
through 2.39
Axis2420-Ir Network Camera
through 2.39
Axis2420 Network Camera
through 2.39
AxisPanorama Ptz Camera
through 2.39

References