CVE-2007-2239

published 2007-05-07

CVE-2007-2239: Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100…

Priority P3 46 critical 9.3 CVSS 2.0

AV N AC M Au N C C I C A C

EXPLOIT

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
axis	2100_network_camera	<= 2.39	—
axis	2110_network_camera	<= 2.39	—
axis	2120_network_camera	<= 2.39	—
axis	2130_ptz_network_camera	<= 2.39	—
axis	2400_video_server	<= 2.39	—
axis	2401_video_server	<= 2.39	—
axis	2411_video_server	<= 2.39	—
axis	2420-ir_network_camera	<= 2.39	—
axis	2420_network_camera	<= 2.39	—
axis	panorama_ptz_camera	<= 2.39	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.