Buffer overflow in Cisco Wvc54gc

CVE-2008-4391

Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments.

Vulnerability class: Buffer Overflow

EPSS: 0.062 (92.8th percentile) — read the EPSS interpretation.

Affected products

Cisco Wvc54gc — versions 1.15
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)
cret@cert.org (vdb-entry, x_refsource_BID)
cret@cert.org (x_refsource_CONFIRM, US Government Resource)
cret@cert.org (x_refsource_SECUNIA, third-party-advisory)