CVE-2012-4876

Published: Sep 6, 2012Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method.

Affected (2)

Products: Trendnet: Securview Wireless Internet Camera Activex Control, Securview Wireless Internet Camera

Trendnet

2 products

Securview Wireless Internet Camera Activex Control

Securview Wireless Internet Camera

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Trendnet Securview Wireless Internet Camera Activex Control	Version 1.1.52.18
Trendnet Securview Wireless Internet Camera	Version tv-ip121wn

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://archives.neohapsis.com/archives/bugtraq/2012-03/0152.html

Source: cve@mitre.org

Exploit

http://osvdb.org/80661

Source: cve@mitre.org

http://retrogod.altervista.org/9sg_trendnet_adv.htm

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/48601

Source: cve@mitre.org

Vendor Advisory

http://www.exploit-db.com/exploits/18675

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/52760

Source: cve@mitre.org

Exploit

http://archives.neohapsis.com/archives/bugtraq/2012-03/0152.html