AXIS Camera Control (aka CamImage) AxisCamControl.ocx ActiveX SaveBMP Method Overflow

The remote host contains a version of the 'CamImage' ActiveX control included with AXIS Camera Control. The version of this ActiveX control on the remote host has a buffer overflow involving its 'SaveBMP' method. If an attacker can trick a user on the affected host into visiting a specially craft...

CVE-2007-2239

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control aka CamImage ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service...

Stack overflow

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control aka CamImage ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service...

CVE-2007-2239

The CVE-2007-2239 entry describes a stack-based buffer overflow in the SaveBMP method of AxisCamControl.ocx (Axis Camera Control, CamImage ActiveX) affecting AXIS 2100/2110/2120/2130 PTZ, 2420/2420-IR, 2400/2400+, 2401/2401+, 2411, and Panorama PTZ. Root cause: a overflow in SaveBMP handles long ...

CVE-2007-2239

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control aka CamImage ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service...

CVE-2007-2239: Undefined Security Weakness

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control aka CamImage ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service...

JVN#06735665 Canon Network Camera Server VB100 Series vulnerable to cross-site scripting

Impact An arbitrary script may be executed in the camera server management screen. Solution Products Affected VB100 and VB101 firmware Ver. 3.0 Rev.69 and earlier VB150 firmware Ver. 1.1 Rev.39 and earlier...

MDKA-2006:016 : libgphoto

A bug was discovered with libgphoto which was preventing the removal of icons on the desktop in GNOME or in the Devices window in KDE when a digital camera was unplugged. Updated packages have been patched to correct the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

CVE-2006-6246

Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to 1 camera del, 2 camera edit, 3 folder/album deletion, 4 photo.move, 5 content.indexer, 6 folder.content, and possibly other...

CVE-2006-6246: Undefined Security Weakness

Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to 1 camera del, 2 camera edit, 3 folder/album deletion, 4 photo.move, 5 content.indexer, 6 folder.content, and possibly other...

CVE-2006-3604

Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for 1 admin/aindex.asp or 2 admin/aindex.html via a .. dot dot and encoded / %2f sequence in the URL...

CVE-2006-3603

Cross-site scripting XSS vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2006-3604

Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for 1 admin/aindex.asp or 2 admin/aindex.html via a .. dot dot and encoded / %2f sequence in the URL...

CVE-2006-3603

Cross-site scripting XSS vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2006-3604

The CVE-2006-3604 entry corresponds to a directory traversal vulnerability in FlexWATCH Network Camera, affecting version 3.0 and earlier. The flaw allows remote attackers to bypass access restrictions for admin pages (admin/aindex.asp and admin/aindex.html) by crafting a URL containing a .. (dot...

CVE-2006-3603

FlexWATCH Network Camera (versions 3.0 and earlier) contains a cross-site scripting (XSS) flaw in index.php that allows remote attackers to inject arbitrary web script or HTML via the URL. The CVE-2006-3603 entry documents this vulnerability with a MEDIUM severity (CVSS v2: AV:N/AC:M/Au:N/C:P/I:P...

PT-2006-4479 · Flexwatch · Flexwatch Network Camera

Name of the Vulnerable Software and Affected Versions: FlexWATCH Network Camera versions 3.0 and earlier Description: A directory traversal issue allows remote attackers to bypass access restrictions for sensitive pages, such as "admin/aindex.asp" or "admin/aindex.html", by using a ".." dot dot a...

CVE-2006-3604: Undefined Security Weakness

Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for 1 admin/aindex.asp or 2 admin/aindex.html via a .. dot dot and encoded / %2f sequence in the URL...

PT-2006-4478 · Flexwatch · Flexwatch Network Camera

Name of the Vulnerable Software and Affected Versions: FlexWATCH Network Camera versions 3.0 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the URL. Recommendations: F...

CVE-2006-3603: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL...