CVE-2007-2239

Published: May 7, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument.

Affected (10)

Products: Axis: 2100 Network Camera, 2110 Network Camera, 2120 Network Camera, 2130 Ptz Network Camera, 2400 Video Server, 2401 Video Server, 2411 Video Server, 2420 Ir Network Camera, 2420 Network Camera, Panorama Ptz Camera

10 products

2130 Ptz Network Camera

2400 Video Server

2401 Video Server

2411 Video Server

2420 Ir Network Camera

2420 Network Camera

Panorama Ptz Camera

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Axis 2100 Network Camera	Up to 2.39
Axis 2110 Network Camera	Up to 2.39
Axis 2120 Network Camera	Up to 2.39
Axis 2130 Ptz Network Camera	Up to 2.39
Axis 2400 Video Server	Up to 2.39
Axis 2401 Video Server	Up to 2.39
Axis 2411 Video Server	Up to 2.39
Axis 2420 Ir Network Camera	Up to 2.39
Axis 2420 Network Camera	Up to 2.39
Axis Panorama Ptz Camera	Up to 2.39