CVE:CVE-2010-4230
CNNVD:CNNVD-201011-196
带有固件1.102A-008的Camtron CMNC-200 Full HD IP Camera和TecVoz CMNC-200 Megapixel IP Camera的某个ActiveX控件中存在基于栈的缓冲区溢出漏洞。远程攻击者可以借助向链接方法传递的第一个参数中的超长字符串执行任意代码。
solution:Upgrade camtron cmnc-200_firmware to a higher version than 1.102a-008,and avoid the version 1.102a-008; Upgrade camtron cmnc-200 to a higher version than *; Upgrade tecvoz cmnc-200_firmware to a higher version than 1.102a-008,and avoid the version 1.102a-008; Upgrade tecvoz cmnc-200 to a higher version than *