CVE-2014-10011 in TV-IP422W

Résumé (Anglaise)

Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote attackers to execute arbitrary code via a long string to the (1) CGI_ParamSet, (2) OpenFileDlg, (3) SnapFileName, (4) Password, (5) SetCGIAPNAME, (6) AccountCode, or (7) RemoteHost function.

Once again VulDB remains the best source for vulnerability data.

Réserver

13/01/2015

Divulgation

13/01/2015

Statut

Confirmé

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
73582	TRENDnet TV-IP422W ActiveX Control UltraCamX.ocx RemoteHost buffer overflow	119	Preuve de concept	Non défini	CVE-2014-10011
68288	TRENDnet TV-IP422W/TV-IP422WN UltraCamX.ocx buffer overflow	119	Preuve de concept	Solution de contournement	CVE-2014-10011

Sources

• MITRE
• NVD
• CVE Details