KLA10051 ACE vulnerability in Axis Camera Control

A buffer overflow vulnerability was found in Axis Camera Control. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to AxisCamControl.ocx via a specially designed image_pan_tilt property value.

Original advisories

Axis bulletin

Related products

AXIS-Camera-ActiveX-Control

CVE list

CVE-2008-5260 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Axis Camera Control version 2.40.0.0