CVE-2007-3488 Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before....
HighCVSS 10.0
EPSS 16.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and SNC-RX570N/W, SNC-RX570N/B, SNC-RX550N/W, SNC-RX550N/B, SNC-RX530N/W, and SNC-RX530N/B 3.00 and 2.x before 2.31; allows remote attackers to execute arbitrary code via a long first argument to the PrmSetNetworkParam method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sony network camera snc-p5 | = 1.0 | No fix listed |
References
- jvn.jp
- JVN#16767117 third-party-advisory
- JVNDB-2009-000012 third-party-advisory
- 39479 vdb-entry
- pro.sony.com
- 24684 vdb-entry
- sncp5-prmsetnetworkparam-bo(35133) vdb-entry
- 4120 exploit