PT-2011-3943 · Provideo · Axplayer.Ocx+3

Publicado 2011-08-05 · Atualizado 2011-09-07 · CVE-2011-2591

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Provideo ActiveX controls versions 1.0.3.1 through 3.0.0.9

Description The issue allows remote attackers to execute arbitrary code via crafted input fields. This can be achieved through multiple buffer overflows, including a long strIp argument to the voice method in 2way.dll, a network response to AXPlayer.ocx, or a long UserName or Password parameter to AXPlayer.ocx. Additionally, a long Id parameter to the GetString method in PAxPlayer.ocx or a long strAdr parameter to the ConnectIPCam method in PAxPlayer.ocx can also be used.

Recommendations For versions 1.0.3.1 through 3.0.0.9, consider disabling the voice method in 2way.dll, restricting access to AXPlayer.ocx, and avoiding the use of the UserName and Password parameters in AXPlayer.ocx until a patch is available. Additionally, restrict the use of the GetString method in PAxPlayer.ocx and the ConnectIPCam method in PAxPlayer.ocx to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-2591

Produtos afetados

2Way.Dll

Axplayer.Ocx

Paxplayer.Ocx

Provideo Activex Controls

Referências · 10

• http://securityfocus.com/bid/48977 · Nota
• http://osvdb.org/74311 · Nota
• http://osvdb.org/74314 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2591 · Nota de Segurança
• http://secunia.com/secunia_research/2011-57 · Aviso do Fabricante
• http://osvdb.org/74312 · Nota
• http://secunia.com/secunia_research/2011-56 · Aviso do Fabricante
• http://osvdb.org/74310 · Nota
• http://secunia.com/secunia_research/2011-58 · Aviso do Fabricante
• http://osvdb.org/74313 · Nota