PT-2004-3420 · Unknown · Webcam Watchdog

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2528

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Webcam Watchdog version 4.0.1a

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the cam parameter in the sresult.exe component.

Recommendations For Webcam Watchdog version 4.0.1a, avoid using the cam parameter in the affected API endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the sresult.exe component to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2004-2528

Produtos afetados

Webcam Watchdog

Referências · 8

• 🔥 http://members.lycos.co.uk/r34ct/main/Webcam_watchdog_401a.txt · Exploit
• 🔥 http://securitytracker.com/id?1010824 · Exploit
• 🔥 https://exploit-db.com/exploits/24342 · Exploit
• 🔥 http://securityfocus.com/bid/10837 · Exploit
• http://secunia.com/advisories/12199 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16854 · Nota
• http://osvdb.org/8260 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2528 · Nota de Segurança