Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-9263

Опубликовано: 08 дек. 2014
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Multiple buffer overflows in the PocketNetNVRMediaClientAxCtrl.NVRMediaViewer.1 control in 3S Pocketnet Tech VMS allow remote attackers to execute arbitrary code via a crafted string to the (1) StartRecord, (2) StartRecordEx, (3) StartScheduledRecord, (4) SetDisplayText, (5) GetONVIFDeviceInformation, (6) GetONVIFProfiles, or (7) GetONVIFStreamUri method or a crafted filename to the (8) SaveCurrentImage or (9) SaveCurrentImageEx method.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:3s_pocketnet_tech:3s_pocketnet_tech_video_management_software:-:*:*:*:*:*:*:*

EPSS

Процентиль: 91%
0.06997
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

github
больше 3 лет назад

Multiple buffer overflows in the PocketNetNVRMediaClientAxCtrl.NVRMediaViewer.1 control in 3S Pocketnet Tech VMS allow remote attackers to execute arbitrary code via a crafted string to the (1) StartRecord, (2) StartRecordEx, (3) StartScheduledRecord, (4) SetDisplayText, (5) GetONVIFDeviceInformation, (6) GetONVIFProfiles, or (7) GetONVIFStreamUri method or a crafted filename to the (8) SaveCurrentImage or (9) SaveCurrentImageEx method.

EPSS

Процентиль: 91%
0.06997
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119