critical9.0Public exploit code
CVE-2013-4980
Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attack…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities2013-08-29 · dos · hardware · Verified
Impact
Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via a long string in the URI in an RTSP SETUP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avtech | Avn801 Dvr Firmware | through 1017-1003-1009-1003 |
| Avtech | Avn801 Dvr | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/96692
- http://seclists.org/fulldisclosure/2013/Aug/284
- http://www.coresecurity.com/advisories/avtech-dvr-multiple-vulnerabilities
- http://osvdb.org/96692
- http://seclists.org/fulldisclosure/2013/Aug/284
- http://www.coresecurity.com/advisories/avtech-dvr-multiple-vulnerabilities