CVE-2008-5260

Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote attackers to execute arbitrary code via a long image_pan_tilt property value.

Score

CVSS 2.0 9.3 Critical

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2009-01-26

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Axis Camera Control (Axis)

References

• http://osvdb.org/51532
• http://secunia.com/advisories/33444
• http://secunia.com/secunia_research/2008-58/
• http://www.axis.com/techsup/software/acc/files/acc_security_update_090119.pdf
• http://www.securityfocus.com/archive/1/500334/100/0/threaded
• http://www.securityfocus.com/bid/33408
• http://www.vupen.com/english/advisories/2009/0228
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48176