The Axis Communications CamImage ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to run arbitrary code on a vulnerable system.
Axis Communications provides an ActiveX control for viewing motion JPEG streams in Microsoft development tools and Microsoft Internet Explorer. The ActiveX control, provided by AxisCamControl.ocx, is known as "CamImage" or "Axis Camera Control." The SaveBMP() method of this control contains a stack buffer overflow.
Axis Communications lists the following products as being affected:
By convincing a user to view a specially crafted HTML document (e.g., a web page or an HTML email message or attachment), an attacker may be able to execute arbitrary code with the privileges of the user. The attacker could also cause the web browser to crash.
Apply an update
This vulnerability is addressed in the Axis Camera Control update. This update will install version 126.96.36.199 of the ActiveX control. Details for the security update are available in the Axis Camera Control ActiveX Update PDF document. If you cannot install the update, please use the following workarounds:
This vulnerability was reported by Will Dormann of the CERT/CC.
This document was written by Will Dormann.
|Date First Published:||2007-05-04|
|Date Last Updated:||2007-06-14 17:33 UTC|