CVE:CVE-2007-2239
CNNVD:CNNVD-200705-093
AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411和Panorama PTZ的AxisCamControl.ocx中的AXIS Camera Control(又称CamImage) ActiveX控件2.40.0.0之前版本里的SaveBMP方式存在栈缓冲区溢出漏洞。远程攻击者可以借助一个长参数，引起拒绝服务攻击(Internet Explorer崩溃)或执行任意代码。
solution:Upgrade axis 2100_network_camera to a higher version than 2.39,and avoid the version (,2.39]; Upgrade axis 2110_network_camera to a higher version than 2.39,and avoid the version (,2.39]; Upgrade axis 2120_network_camera to a higher version than 2.39,and avoid the version (,2.39]; Upgrade axis 2130_ptz_network_camera to a higher version than 2.39,and avoid the version (,2.39]; Upgrade axis 2400_video_server to a higher version than 2.39,and avoid the version (,2.39]; Upgrade axis 2401_video_server to a higher version than 2.39,and avoid the version (,2.39]; Upgrade axis 2411_video_server to a higher version than 2.39,and avoid the version (,2.39]; Upgrade axis 2420-ir_network_camera to a higher version than 2.39,and avoid the version (,2.39]; Upgrade axis 2420_network_camera to a higher version than 2.39,and avoid the version (,2.39]; Upgrade axis panorama_ptz_camera to a higher version than 2.39,and avoid the version (,2.39]