PT-2011-3943 · Provideo · Axplayer.Ocx+3

Published 2011-08-05 · Updated 2011-09-07 · CVE-2011-2591

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Provideo ActiveX controls versions 1.0.3.1 through 3.0.0.9

Description The issue allows remote attackers to execute arbitrary code via crafted input fields. This can be achieved through multiple buffer overflows, including a long strIp argument to the voice method in 2way.dll, a network response to AXPlayer.ocx, or a long UserName or Password parameter to AXPlayer.ocx. Additionally, a long Id parameter to the GetString method in PAxPlayer.ocx or a long strAdr parameter to the ConnectIPCam method in PAxPlayer.ocx can also be used.

Recommendations For versions 1.0.3.1 through 3.0.0.9, consider disabling the voice method in 2way.dll, restricting access to AXPlayer.ocx, and avoiding the use of the UserName and Password parameters in AXPlayer.ocx until a patch is available. Additionally, restrict the use of the GetString method in PAxPlayer.ocx and the ConnectIPCam method in PAxPlayer.ocx to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-2591

Affected Products

2Way.Dll

Axplayer.Ocx

Paxplayer.Ocx

Provideo Activex Controls

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2011-2591 · Security Note
• http://secunia.com/secunia_research/2011-57 · Vendor Advisory
• http://secunia.com/secunia_research/2011-56 · Vendor Advisory
• http://secunia.com/secunia_research/2011-58 · Vendor Advisory
• http://securityfocus.com/bid/48977 · Note
• http://osvdb.org/74311 · Note
• http://osvdb.org/74314 · Note
• http://osvdb.org/74312 · Note
• http://osvdb.org/74310 · Note
• http://osvdb.org/74313 · Note