CVE-2023-31594

CVE-2023-31594 IC Realtime ICIP-P2012T 存在不正确的访问控制漏洞 IC Realtime IP PTZ 球型摄像机 ICIP-P2012T 软件版本 2.420 中存在未认证的流媒体通道 实时源（MJPEG）可通过暴露的 HTTP 通道使用 VLC 网络流进行流式传输。此漏洞严重影响了客户的机密性，并可能用于侦察阶段（识别人员、资产、密码等）。 概念验证 POC 如果允许 HTTP 流式传输，则可使用 URL 路径让用户无需任何认证即可获取摄像机的 MJPEG 流。 路径：...

Microsoft DirectX Crafted MJPEG Stream Handling Code Execution - Ver2 (CVE-2008-0011)

A code execution vulnerability has been reported in Microsoft DirectX application framework. The vulnerability is due to the way DirectX handles specially crafted MJPEG streams. A remote attacker could exploit this vulnerability by persuading a user to open a specially crafted ASF or AVI file,...

Microsoft DirectX Crafted MJPEG Stream Handling Code Execution (MS08-033; CVE-2008-0011)

Microsoft DirectX is a software component which contains a set of APIs that provide access to graphics acceleration chips and sound cards and other types of media hardware. These APIs control low-level functions including graphics acceleration, support for input devices such as joysticks,...