CVE-2008-6087

CVE-2008-6087 describes a cross-site scripting (XSS) vulnerability in the Camera Life application, specifically in topic.php of version 2.6.2b4, exploitable via the name parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The provided connected documents c...

Update Protection against AXIS Communications Camera Control image_pan_tilt Buffer Overflow

A buffer overflow vulnerability was reported in the ActiveX Camera Control by AXIS Communications. A remote image/video monitoring solution, AXIS Camera Control is an ActiveX control with multiple functions that can be used over HTTP. The vulnerability is due to a boundary error that can be...

AXIS Camera控件image_pan_tilt属性缓冲区溢出漏洞

AXIS Camera Control是一种可以在IE中观看网络流媒体的控件程序。 AXIS Camera Control的实现上存在缓冲溢出漏洞，远程恶意网站可能利用此漏洞控制用户客户端系统。 控件在处理超长的imagepantilt属性数据时存在堆溢出问题，远程恶意网站可以通过设置超长的数据触发溢出控制客户端系统。 Axis Communications Camera Control = 2.40.0.0 厂商补丁： Axis Communications ------------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Heap overflow

Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote attackers to execute arbitrary code via a long imagepantilt property value...

KLA10051 ACE vulnerability in Axis Camera Control

A buffer overflow vulnerability was found in Axis Camera Control. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to AxisCamControl.ocx via a specially designed imagepantilt property value. Origin...

Secunia Research: AXIS Camera Control "image_pan_tilt" Property Buffer Overflow

====================================================================== Secunia Research 23/01/2009 - AXIS Camera Control "imagepantilt" Property Buffer Overflow - ====================================================================== Table of Contents Affected...

AXIS Camera Control ActiveX buffer overflow

Buffer overflow in imagepantilt property...

[SECURITY] Fedora 10 Update: zoneminder-1.23.3-2.fc10

ZoneMinder is a set of applications which is intended to provide a complete solution allowing you to capture, analyse, record and monitor any cameras y ou have attached to a Linux based machine. It is designed to run on kernels wh ich support the Video For Linux V4L interface and has been tested...

CVE-2008-4391

Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments...

CVE-2008-4390

The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network...

CVE-2008-4390

The CVE-2008-4390 entry affects Cisco Linksys WVC54GC/GCAs (wireless video cameras) prior to firmware 1.25. The issue is that, in response to a Setup Wizard remote-management command, the device sends cleartext configuration data over the network, enabling remote attackers to obtain sensitive det...

CVE-2008-4391

CVE-2008-4391 affects Linksys WVC54GC, specifically the NetCamPlayerWeb11gv2.ocx ActiveX control. The issue is a stack-based/buffer overflow in SetSource that can be triggered by long invalid arguments in a specially crafted HTML page, potentially allowing remote code execution with the user’s pr...

CVE-2008-4390

The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network...

Linksys WVC54GC wireless video camera vulnerable to information disclosure

Overview The Linksys WVC54GC wireless video camera insecurely sends initial configuration information over the network, which can allow a remote, unauthenticated attacker to intercept video streams, access wireless network authentication credentials, modify the device firmware, or cause a...

Adobe Flash Player clickjacking

The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking...

Adobe Flash Player clickjacking

The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking...

Adobe Flash Player Multiple Security Bypass Vulnerabilities - Windows

Adobe Flash Player is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenSSL 'zlib'压缩内存泄漏远程拒绝服务漏洞

BUGTRAQ ID: 31692 CVE ID：CVE-2008-1678 CNCVE ID：CNCVE-20081678 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密。 OpenSSL 'zlib'压缩库存在一个内存泄漏问题，远程攻击者可以利用漏洞消耗大量内存而对服务程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Axis Communications 2130 PTZ Network Camera 0.9.8h Axis Communications 2130 PTZ Network Camera 0.9.8g Axis Communications...

Design/Logic Flaw

The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking...

CVE-2008-4503

CVE-2008-4503 : Adobe Flash Player before 9.0.124.0 has a Settings Manager display flaw enabling clickjacking, where malicious content can disguise dialogs to trick the user into interacting with a link or dialog, potentially granting camera/microphone access. Multiple sources (Gentoo GLSA, OpenV...