Lucene search

CertccCVE-2008-4391

HistoryDec 09, 2008 - 12:30 a.m.

CVE-2008-4391

2008-12-0900:30:00

CWE-119

certcc

web.nvd.nist.gov

cve-2008-4391

cisco

linksys

wvc54gc

buffer overflow

netcamplayerweb11gv2

activex

video camera

firmware 1.25

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.019

Percentile

88.5%

JSON

Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments.

Affected configurations

Nvd

Node

ciscowvc54gcRange≤1.19

ciscowvc54gcMatch1.15

VendorProductVersionCPE
ciscowvc54gc*cpe:2.3:h:cisco:wvc54gc:*:*:*:*:*:*:*:*
ciscowvc54gc1.15cpe:2.3:h:cisco:wvc54gc:1.15:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	wvc54gc	*	cpe:2.3:h:cisco:wvc54gc::::::::
cisco	wvc54gc	1.15	cpe:2.3:h:cisco:wvc54gc:1.15:::::::*

References

secunia.com/advisories/33032

www.kb.cert.org/vuls/id/639345

www.kb.cert.org/vuls/id/WDON-7M2U52

www.securityfocus.com/bid/32665

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.019

Percentile

88.5%

JSON

Related for CVE-2008-4391