CVE-2010-4230: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a long string in the first argument to the connect method...

Camtron CMNC-200 IP Camera Authentication Bypass

Exploit for hardware platform in category web applications ================================================ Camtron CMNC-200 IP Camera Authentication Bypass ================================================ The CMNC-200 IP Camera has an administrative web interface that does not handle...

Camtron CMNC-200 IP Camera Denial of Service

Exploit for hardware platform in category dos / poc ============================================ Camtron CMNC-200 IP Camera Denial of Service ============================================ The CMNC-200 IP Camera has a built-in web server that is vulnerable to denial of service attacks. Sending...

Camtron CMNC-200 IP Camera Undocumented Default Accounts

Exploit for hardware platform in category web applications ======================================================== Camtron CMNC-200 IP Camera Undocumented Default Accounts ======================================================== The CMNC-200 IP Camera has undocumented default accounts on its Lin...

Camtron CMNC-200 IP Camera Directory Traversal Vulnerability

Exploit for hardware platform in category remote exploits ============================================================ Camtron CMNC-200 IP Camera Directory Traversal Vulnerability ============================================================ The CMNC-200 IP Camera has a built-in web server that is...

Camtron CMNC-200 IP Camera ActiveX Buffer Overflow Vulnerability

Exploit for hardware platform in category dos / poc ================================================================ Camtron CMNC-200 IP Camera ActiveX Buffer Overflow Vulnerability ================================================================ The CMNC-200 IP Camera ActiveX control identified ...

Camtron CMNC-200 IP Camera - Denial of Service

Camtron CMNC-200 IP Camera - Denial of Service Finding 5: Camera Denial of Service CVE: CVE-2010-4234 The CMNC-200 IP Camera has a built-in web server that is vulnerable to denial of service attacks. Sending multiple requests in parallel to the web server may cause the camera to reboot. Requests...

Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow

Finding 1: Buffer Overflow in ActiveX Control CVE: CVE-2010-4230 The CMNC-200 IP Camera ActiveX control identified by CLSID DD01C8CA-5DA0-4B01-9603-B7194E561D32 is vulnerable to a stack overflow on the first argument of the connect method. The vulnerability can be used to set the EIP register,...

Camtron CMNC-200 IP Camera - Denial of Service

Finding 5: Camera Denial of Service CVE: CVE-2010-4234 The CMNC-200 IP Camera has a built-in web server that is vulnerable to denial of service attacks. Sending multiple requests in parallel to the web server may cause the camera to reboot. Requests with long cookie header makes the IP camera...

Camtron CMNC-200 IP Camera - Directory Traversal

Camtron CMNC-200 IP Camera - Directory Traversal Finding 2: Directory Traversal in Camera Web Server CVE: CVE-2010-4231 The CMNC-200 IP Camera has a built-in web server that is enabled by default. The server is vulnerable to directory transversal attacks, allowing access to any file on the camera...

Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow

Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow Finding 1: Buffer Overflow in ActiveX Control CVE: CVE-2010-4230 The CMNC-200 IP Camera ActiveX control identified by CLSID DD01C8CA-5DA0-4B01-9603-B7194E561D32 is vulnerable to a stack overflow on the first argument of the connect method. The...

Camtron CMNC-200 IP Camera - Authentication Bypass

Camtron CMNC-200 IP Camera - Authentication Bypass Finding 3: Web Based Administration Interface Bypass CVE: CVE-2010-4232 The CMNC-200 IP Camera has an administrative web interface that does not handle authentication properly. Using a properly formatted request, an attacker can bypass the...

Camtron CMNC-200 IP Camera Traversal / Overflow / Bypass / Denial Of Service

Trustwave's SpiderLabs Security Advisory TWSL2010-006: Multiple Vulnerabilities in Camtron CMNC-200 IP Camera https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt Published: 2010-11-12 Version: 1.0 Vendors: Camtron http://www.camtron.co.kr/ TecVoz http://www.tecvoz.com.br/ Products:...

[security bulletin] HPSBMI02582 SSRT100269 rev.1 - Palm webOS Camera Application, Unauthorized Write Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02518539 Version: 1 HPSBMI02582 SSRT100269 rev.1 - Palm webOS Camera Application, Unauthorized Write Access NOTICE: The information in this Security Bulletin should be acted upon as soon as...

CVE-2010-4027

Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors...

CVE-2010-4027

Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors...

CVE-2010-4027

The CVE-2010-4027 issue affects HP Palm webOS 1.4.1, specifically the camera application, enabling a local user to overwrite arbitrary files on the device filesystem via unknown vectors. HP’s security bulletin (HPSBMI02582 SSRT100269 rev.1) confirms the vulnerability and assigns CVSS v2 base metr...

CVE-2010-4027: Undefined Security Weakness

Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors...

LEADTOOLS 16.5 Active-X Common Dialogs Vulnerabilities

LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that has a TWAIN 32 and 64 bit device...