PT-2004-3420 · Unknown · Webcam Watchdog

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2528

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Webcam Watchdog version 4.0.1a

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the cam parameter in the sresult.exe component.

Recommendations For Webcam Watchdog version 4.0.1a, avoid using the cam parameter in the affected API endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the sresult.exe component to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-2528

Affected Products

Webcam Watchdog

References · 8

• 🔥 http://members.lycos.co.uk/r34ct/main/Webcam_watchdog_401a.txt · Exploit
• 🔥 http://securitytracker.com/id?1010824 · Exploit
• 🔥 https://exploit-db.com/exploits/24342 · Exploit
• 🔥 http://securityfocus.com/bid/10837 · Exploit
• http://secunia.com/advisories/12199 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2528 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16854 · Note
• http://osvdb.org/8260 · Note