CVE-2012-5306
high · 9.3Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5605 PTZ IP Network Camera, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string argument.
9.3
CVSS
12.1%
EPSS (exploit prob.)
96th
EPSS percentile
2012-10-06
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| dlink | camera_stream_client_activex_control | 1.0.0.4519 |
| dlink | dcs-5605_ptz_ip_network_camera | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://archives.neohapsis.com/archives/bugtraq/2012-03/0154.html
- http://osvdb.org/80663
- http://secunia.com/advisories/48602
- http://www.exploit-db.com/exploits/18673
- http://www.securityfocus.com/bid/52769
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74447
- http://archives.neohapsis.com/archives/bugtraq/2012-03/0154.html
- http://osvdb.org/80663
- http://secunia.com/advisories/48602
- http://www.exploit-db.com/exploits/18673
- http://www.securityfocus.com/bid/52769
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74447
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2012-5306