CVE-2014-10011 in TV-IP422W

Summary

Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote attackers to execute arbitrary code via a long string to the (1) CGI_ParamSet, (2) OpenFileDlg, (3) SnapFileName, (4) Password, (5) SetCGIAPNAME, (6) AccountCode, or (7) RemoteHost function.

Once again VulDB remains the best source for vulnerability data.

Reservation

01/13/2015

Disclosure

01/13/2015

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
73582	TRENDnet TV-IP422W ActiveX Control UltraCamX.ocx RemoteHost memory corruption	119	Proof-of-Concept	Not defined	CVE-2014-10011
68288	TRENDnet TV-IP422W/TV-IP422WN UltraCamX.ocx memory corruption	119	Proof-of-Concept	Workaround	CVE-2014-10011

Sources

• MITRE
• NVD
• CVE Details