VulnerabilityModified

CVE-2007-2239

HIGH 9.3EPSS 11.8%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 11.8%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.

Description

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument.

CVSS 2.0: 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 11.81% probability · 96th percentile
CISA KEV: Not listed
Affected: axis/2100 network camera · axis/2110 network camera · axis/2120 network camera · axis/2130 ptz network camera · axis/2400 video server · axis/2401 video server · axis/2411 video server · axis/2420-ir network camera · axis/2420 network camera · axis/panorama ptz camera
Source: cret@cert.org

References

http://osvdb.org/35602
http://secunia.com/advisories/25093Patch, Vendor Advisory
http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdfVendor Advisory
http://www.kb.cert.org/vuls/id/355809US Government Resource
http://www.securityfocus.com/bid/23816
http://www.vupen.com/english/advisories/2007/1663
https://exchange.xforce.ibmcloud.com/vulnerabilities/34133
http://osvdb.org/35602
http://secunia.com/advisories/25093Patch, Vendor Advisory
http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdfVendor Advisory
http://www.kb.cert.org/vuls/id/355809US Government Resource
http://www.securityfocus.com/bid/23816
http://www.vupen.com/english/advisories/2007/1663
https://exchange.xforce.ibmcloud.com/vulnerabilities/34133

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.