critical9.3Public exploit code
CVE-2012-0284
Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ I…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco Linksys PlayerPT - ActiveX Control SetSource sURL argument Buffer Overflow (Metasploit)2012-08-03 · remote · windows · Verified
- Cisco Linksys WVC200 Wireless-G PTZ Internet Video Camera PlayerPT - ActiveX Control PlayerPT.ocx sprintf Buffer Overflow (PoC)2012-03-22 · dos · windows · Verified
Impact
Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument (aka the sURL argument).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Linksys Playerpt Activex Control | Version 1.0.0.15 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2012-07/0113.html
- http://secunia.com/secunia_research/2012-25/
- http://www.securityfocus.com/bid/54588
- http://www.securitytracker.com/id?1027259
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77085
- http://archives.neohapsis.com/archives/bugtraq/2012-07/0113.html
- http://secunia.com/secunia_research/2012-25/
- http://www.securityfocus.com/bid/54588
- http://www.securitytracker.com/id?1027259
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77085