Lucene search

[email protected]CVE-2012-5306

HistoryOct 06, 2012 - 10:55 p.m.

CVE-2012-5306

2012-10-0622:55:02

CWE-119

[email protected]

web.nvd.nist.gov

cve-2012-5306

d-link

dcs-5605

ptz ip network camera

buffer overflow

denial of service

remote attack

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

High

0.313 Low

EPSS

Percentile

97.0%

JSON

Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5605 PTZ IP Network Camera, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string argument.

Affected configurations

NVD

Node

dlinkcamera_stream_client_activex_controlMatch1.0.0.4519

dlinkdcs-5605_ptz_ip_network_cameraMatch-

CPENameOperatorVersion
dlink:camera_stream_client_activex_controldlink camera stream client activex controleq1.0.0.4519
dlink:dcs-5605_ptz_ip_network_cameradlink dcs-5605 ptz ip network cameraeq-

CPE	Name	Operator	Version
dlink:camera_stream_client_activex_control	dlink camera stream client activex control	eq	1.0.0.4519
dlink:dcs-5605_ptz_ip_network_camera	dlink dcs-5605 ptz ip network camera	eq	-

References

archives.neohapsis.com/archives/bugtraq/2012-03/0154.html

osvdb.org/80663

secunia.com/advisories/48602

www.exploit-db.com/exploits/18673

www.securityfocus.com/bid/52769

exchange.xforce.ibmcloud.com/vulnerabilities/74447

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

High

0.313 Low

EPSS

Percentile

97.0%

JSON

Related for CVE-2012-5306

nvd1 cvelist1 nessus1 prion1