Debian Security Advisory DSA 2559-1 (libexif)

The remote host is missing an update to libexif announced via advisory DSA 2559-1. OpenVAS Vulnerability Test $Id: deb25591.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2559-1 libexif Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2559-1 : libexif - several vulnerabilities

Several vulnerabilities were found in libexif, a library used to parse EXIF meta-data on camera files. - CVE-2012-2812 : A heap-based out-of-bounds array read in the exifentrygetvalue function allows remote attackers to cause a denial of service or possibly obtain potentially sensitive informatio...

DSA-2559-1 libexif - several

Bulletin has no description...

Multi-vendor IP camera web interface authentication bypass

Overview The web interface firmware for Foscam and Wansview H.264 Hi3510/11/12 IP cameras contain an authentication bypass vulnerability. Other vendors that share the same base firmware image are also vulnerable. Description It has been reported that the web interface for IP cameras from several...

CVE-2012-5306

Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5605 PTZ IP Network Camera, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string argument...

Stack overflow

Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5605 PTZ IP Network Camera, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string argument...

CVE-2012-5306

CVE-2012-5306 affects the D-Link DCS-5605 PTZ IP Network Camera via the DcsCliCtrl.dll ActiveX control. The vulnerability is a stack-based buffer overflow in the SelectDirectory method that can be triggered by a long string argument, leading to a remote denial of service (crash) and potentially a...

PT-2012-5905 · D Link · Dcsclictrl.Dll +2

Name of the Vulnerable Software and Affected Versions: D-Link DCS-5605 PTZ IP Network Camera affected versions not specified Description: The issue is related to a stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll, which is part of the Camera Stream Client ActiveX Contro...

Design/Logic Flaw

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors involving use of the camera...

CVE-2012-3739

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors involving use of the camera...

CVE-2012-3739

CVE-2012-3739 affects Apple iOS prior to 6. The vulnerability lies in the Passcode Lock implementation where, via camera-related interaction, a physically proximate attacker can bypass the intended passcode requirement on the lock screen. Impact as described: bypass of lock. Remediation: update t...

CVE-2012-4876

Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method...

Stack overflow

Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method...

CVE-2012-4876

Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method...

CVE-2012-4876

CVE-2012-4876 describes a stack-based buffer overflow in TRENDnet SecurView UltraMJCam ActiveX Control (OpenFileDlg method). The root cause is that the argument to OpenFileDlg is not size-checked before WideCharToMultiByte, allowing a long string to overflow the stack and potentially execute arbi...

Cisco Linksys PlayerPT ActiveX Control SetSource sURL argument Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0",...

Cisco Linksys PlayerPT ActiveX Control SetSource sURL argument Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Cisco Linksys PlayerPT - ActiveX Control SetSource sURL argument Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0",...

http-exif-spider NSE Script

Spiders a site's images looking for interesting exif data embedded in .jpg files. Displays the make and model of the camera, the date the photo was taken, and the embedded geotag information. Script Arguments http-exif-spider.url the url to start spidering. This is a URL relative to the scanned...

Cisco Linksys PlayerPT ActiveX Control Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...