CVE:CVE-2019-6001
CNNVD:CNNVD-201908-437
Canon EOS-1D X等都是日本佳能（Canon）公司的产品。Canon EOS-1D X是一款EOS系列的数码相机。EOS-1D C是一款EOS系列的数码相机。PowerShot SX740 HS是一款PowerShot系列的数码相机。
Canon EOS系列和PowerShot系列电子摄像头中的PTP存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。以下产品及版本受到影响：使用2.1.0及之前版本固件的EOS-1D X；使用1.1.6及之前版本固件的EOS-1D X MKII；使用1.4.1及之前版本固件的EOS-1D C；使用1.3.5及之前版本固件的EOS 5D MARK III；使用1.2.0及之前版本固件的EOS 5D MARK IV；使用1.1.2及之前版本固件的EOS 5DS；使用1.1.2及之前版本固件的EOS 5DS R；使用1.1.8及之前版本固件的EOS 6D；使用1.0.4及之前版本固件的EOS 6D MARK II；使用1.1.2及之前版本固件的EOS 7D MARK II；使用1.1.2及之前版本固件的EOS 70 D；使用1.0.2及之前版本固件的EOS 80 D；使用1.1.5及之前版本固件的EOS KISS X7I / EOS D REBEL T5I / EOS 700D；使用1.0.0及之前版本固件的EOS KISS X8I / EOS D REBEL T6I / EOS 750D；使用1.0.1及之前版本固件的EOS KISS X9I / EOS D REBEL T7I / EOS 800D；使用1.0.1及之前版本固件的EOS KISS X7 / EOS D REBEL SL1 / EOS 100D；使用1.0.1及之前版本固件的EOS KISS X9 / EOS D REBEL SL2 / EOS 200D；使用1.0.1及之前版本固件的EOS KISS X10 / EOS D REBEL SL3 / EOS 200D / EOS 250D；使用1.0.0及之前版本固件的EOS 8000D / EOS D REBEL T6S / EOS 760D；使用1.0.2及之前版本固件的EOS 9000D / EOS 77D；使用1.0.2及之前版本固件的EOS KISS X70 / EOS D REBEL T5 / EOS 1200D；使用1.0.2及之前版本固件的EOS D REBEL T5 RE / EOS 1200D MG / EOS HI；使用1.1.0及之前版本固件的EOS KISS X80 / EOS D REBEL T6 / EOS 1300D；使用1.0.0 及之前版本固件的EOS KISS X90 / EOS D REBEL T7 / EOS 1500D / EOS 2000D；使用1.0.0 及之前版本固件的EOS D REBEL T100 / EOS 3000D / EOS 4000D；使用1.3.0及之前版本固件的EOS R；使用1.2.0及之前版本固件的EOS RP；使用1.2.0及之前版本固件的EOS RP GOLD；使用1.0.3及之前版本固件的EOS M2；使用1.2.0及之前版本固件的EOS M3；使用1.0.1及之前版本固件的EOS M5；使用1.0.1及之前版本固件的EOS M6；使用5.0.0及之前版本固件的EOS M6(China)；使用1.1.0及之前版本固件的EOS M10；使用1.1.0及之前版本固件的EOS M100；使用1.0.2及之前版本固件的EOS KISS M / EOS M50；使用1.0.1及之前版本固件的PowerShot SX740 HS；使用1.0.1及之前版本固件的PowerShot SX70 HS；使用1.0.1及之前版本固件的PowerShot G5Xmark。
solution:Upgrade canon eos-1d_x_firmware to a higher version than 2.1.0,and avoid the version (,2.1.0]; Upgrade canon eos-1d_x_mkii_firmware to a higher version than 1.1.6,and avoid the version (,1.1.6]; Upgrade canon eos-1d_c_firmware to a higher version than 1.4.1,and avoid the version (,1.4.1]; Upgrade canon eos_5d_mark_iii_firmware to a higher version than 1.3.5,and avoid the version (,1.3.5]; Upgrade canon eos_5d_mark_iv_firmware to a higher version than 1.2.0,and avoid the version (,1.2.0]; Upgrade canon eos_5ds_firmware to a higher version than 1.1.2,and avoid the version (,1.1.2]; Upgrade canon eos_5ds_r_firmware to a higher version than 1.1.2,and avoid the version (,1.1.2]; Upgrade canon eos_6d_firmware to a higher version than 1.1.8,and avoid the version (,1.1.8]; Upgrade canon eos_7d_mark_ii_firmware to a higher version than 1.1.2,and avoid the version (,1.1.2]; Upgrade canon eos_70d_firmware to a higher version than 1.1.2,and avoid the version (,1.1.2]; Upgrade canon eos_80d_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade canon eos_kiss_x7i_firmware to a higher version than 1.1.5,and avoid the version (,1.1.5]; Upgrade canon eos_d_rebel_t5i_firmware to a higher version than 1.1.5,and avoid the version (,1.1.5]; Upgrade canon eos_700d_firmware to a higher version than 1.1.5,and avoid the version (,1.1.5]; Upgrade canon eos_kiss_x8i_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_d_rebel_t6i_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_750d_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_kiss_x9i_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_d_rebel_t7i_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_800d_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_kiss_x7_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_d_rebel_sl1_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_100d_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_kiss_x9_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_d_rebel_sl2_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_200d_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_kiss_x10_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_d_rebel_sl3_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_250d_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_8000d_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_d_rebel_t6s_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_760d_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_9000d_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade canon eos_77d_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade canon eos_kiss_x70_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade canon eos_d_rebel_t5_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade canon eos_1200d_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade canon eos_d_rebel_t5_re_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade canon eos_1200d_mg_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade canon eos_hi_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade canon eos_kiss_x80_firmware to a higher version than 1.1.0,and avoid the version (,1.1.0]; Upgrade canon eos_d_rebel_t6_firmware to a higher version than 1.1.0,and avoid the version (,1.1.0]; Upgrade canon eos_1300d_firmware to a higher version than 1.1.0,and avoid the version (,1.1.0]; Upgrade canon eos_kiss_x90_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_d_rebel_t7_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_1500d_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_2000d_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_d_rebel_t100_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_3000d_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_4000d_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_r_firmware to a higher version than 1.3.0,and avoid the version (,1.3.0]; Upgrade canon eos_rp_firmware to a higher version than 1.2.0,and avoid the version (,1.2.0]; Upgrade canon eos_rp_gold_firmware to a higher version than 1.2.0,and avoid the version (,1.2.0]; Upgrade canon eos_m2_firmware to a higher version than 1.0.3,and avoid the version (,1.0.3]; Upgrade canon eos_m3_firmware to a higher version than 1.2.0,and avoid the version (,1.2.0]; Upgrade canon eos_m5_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_m6_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_m6(china)_firmware to a higher version than 5.0.0,and avoid the version (,5.0.0]; Upgrade canon eos_m10_firmware to a higher version than 1.1.0,and avoid the version (,1.1.0]; Upgrade canon eos_m100_firmware to a higher version than 1.0.0,and avoid the version (,1.0.0]; Upgrade canon eos_kiss_m_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade canon eos_m50_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade canon powershot_sx740_hs_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon powershot_sx70_hs_firmware to a higher version than 1.1.0,and avoid the version (,1.1.0]; Upgrade canon powershot_g5xmark_ii_firmware to a higher version than 1.0.1,and avoid the version (,1.0.1]; Upgrade canon eos_6d_mark_ii_firmware to a higher version than 1.0.4,and avoid the version (,1.0.4]