CVE-2008-5674 Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and r...
HighCVSS 9.4
EPSS 4.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| darkwet webcam xp | <= 3.72.440.0 | No fix listed |
| darkwet webcam xp | = 1.02.432 | No fix listed |
| darkwet webcam xp | = 1.02.535 | No fix listed |
| darkwet webcam xp | = 1.6.945 | No fix listed |
| darkwet webcam xp | = 2.20 | No fix listed |
| darkwet webcam xp | = 3.72 | No fix listed |
References
- aluigi.altervista.org
- 42929 vdb-entry
- 29007 third-party-advisory vendor-advisory
- 4788 third-party-advisory
- 42927 vdb-entry
- 42928 vdb-entry
- 20080219 Access violation and limited informations disclosure in webcamXP 3.72.440.0 mailing-list
- 27875 exploit vdb-entry