CVE-2007-2239
high · 9.3Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument.
9.3
CVSS
11.8%
EPSS (exploit prob.)
96th
EPSS percentile
2007-05-07
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| axis | 2100_network_camera | <= 2.39 |
| axis | 2110_network_camera | <= 2.39 |
| axis | 2120_network_camera | <= 2.39 |
| axis | 2130_ptz_network_camera | <= 2.39 |
| axis | 2400_video_server | <= 2.39 |
| axis | 2401_video_server | <= 2.39 |
| axis | 2411_video_server | <= 2.39 |
| axis | 2420-ir_network_camera | <= 2.39 |
| axis | 2420_network_camera | <= 2.39 |
| axis | panorama_ptz_camera | <= 2.39 |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/35602
- http://secunia.com/advisories/25093
- http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf
- http://www.kb.cert.org/vuls/id/355809
- http://www.securityfocus.com/bid/23816
- http://www.vupen.com/english/advisories/2007/1663
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34133
- http://osvdb.org/35602
- http://secunia.com/advisories/25093
- http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf
- http://www.kb.cert.org/vuls/id/355809
- http://www.securityfocus.com/bid/23816
- http://www.vupen.com/english/advisories/2007/1663
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34133
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-2239