US-CERT
Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information
 

 View Notes By
Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric

 Other Documents
Technical Alerts

Technical Bulletins

Alerts

Security Tips

Linksys (A division of Cisco Systems) Information for VU#639345

Date Notified:2008-08-15
Date Updated:2008-12-05
Statement Date:
Status Summary:Vulnerable

Vendor Statement

Vulnerability 2: ActiveX Stack-Based Buffer Overflow

    Description: long invalid arguments on ActiveX will cause overflow triggered
    Solution: 2300 and 210 have no such issue. The method of passing arguments to ActiveX is changed.

    Vendor Information

    The vendor has not provided us with any further information regarding this vulnerability.

    Addendum

    This vulnerability is addressed in WVC54GC firmware version 1.25. Please see the release notes for more details. Note that any client system that has installed the ActiveX control must connect to the camera and install the updated control.

    If you have feedback, comments, or additional information about this vulnerability, please send us email.
     

Produced 2009 by US-CERT, a government organization
Disclaimers and copyright information