CVE-2019-6000
published 2019-08-06CVE-2019-6000: Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version…
PriorityP353high8.8CVSS 3.0
AVAACLPRNUINSUCHIHAH
EPSS
2.44%
82.5th percentile
Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firmware version 1.1.8 and earlier, EOS 6D MARK II firmware version 1.0.4 and earlier, EOS 7D MARK II firmware version 1.1.2 and earlier, EOS 70 D firmware version 1.1.2 and earlier, EOS 80 D firmware version 1.0.2 and earlier, EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier, EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and earlier, EOS KISS X9I / EOS D REBEL T7I / EOS 800D firmware version 1.0.1 and earlier, EOS KISS X7 / EOS D REBEL SL1 / EOS 100D firmware version 1.0.1 and earlier, EOS KISS X9 / EOS D REBEL SL2 / EOS 200D firmware version 1.0.1 and earlier, EOS KISS X10 / EOS D REBEL SL3 / EOS 200D / EOS 250D firmware version 1.0.1 and earlier, EOS 8000D / EOS D REBEL T6S / EOS 760D firmware version 1.0.0 and earlier, EOS 9000D / EOS 77D firmware version 1.0.2 and earlier, EOS KISS X70 / EOS D REBEL T5 / EOS 1200D firmware version 1.0.2 and earlier, EOS D REBEL T5 RE / EOS 1200D MG / EOS HI firmware version 1.0.2 and earlier, EOS KISS X80 / EOS D REBEL T6 / EOS 1300D firmware version 1.1.0 and earlier, EOS KISS X90 / EOS D REBEL T7 / EOS 1500D / EOS 2000D firmware version 1.0.0 and earlier, EOS D REBEL T100 / EOS 3000D / EOS 4000D firmware version 1.0.0 and earlier, EOS R firmware version 1.3.0 and earlier, EOS RP firmware version 1.2.0 and earlier, EOS RP GOLD firmware version 1.2.0 and earlier, EOS M2 firmware version 1.0.3 and earlier, EOS M3 firmware version 1.2.0 and earlier, EOS M5 firmware version 1.0.1 and earlier, EOS M6 firmware version 1.0.1 and earlier, EOS M6(China) firmware version 5.0.0
Affected
66 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canon | eos-1d_c_firmware | <= 1.4.1 | — |
| canon | eos-1d_x_firmware | <= 2.1.0 | — |
| canon | eos-1d_x_mkii_firmware | <= 1.1.6 | — |
| canon | eos_100d_firmware | <= 1.0.1 | — |
| canon | eos_1200d_firmware | <= 1.0.2 | — |
| canon | eos_1200d_mg_firmware | <= 1.0.2 | — |
| canon | eos_1300d_firmware | <= 1.1.0 | — |
| canon | eos_1500d_firmware | <= 1.0.0 | — |
| canon | eos_2000d_firmware | <= 1.0.0 | — |
| canon | eos_200d_firmware | <= 1.0.1 | — |
| canon | eos_250d_firmware | <= 1.0.1 | — |
| canon | eos_3000d_firmware | <= 1.0.0 | — |
| canon | eos_4000d_firmware | <= 1.0.0 | — |
| canon | eos_5d_mark_iii_firmware | <= 1.3.5 | — |
| canon | eos_5d_mark_iv_firmware | <= 1.2.0 | — |
| canon | eos_5ds_firmware | <= 1.1.2 | — |
| canon | eos_5ds_r_firmware | <= 1.1.2 | — |
| canon | eos_6d_firmware | <= 1.1.8 | — |
| canon | eos_6d_mark_ii_firmware | <= 1.0.4 | — |
| canon | eos_700d_firmware | <= 1.1.5 | — |
| canon | eos_70d_firmware | <= 1.1.2 | — |
| canon | eos_750d_firmware | <= 1.0.0 | — |
| canon | eos_760d_firmware | <= 1.0.0 | — |
| canon | eos_77d_firmware | <= 1.0.2 | — |
| canon | eos_7d_mark_ii_firmware | <= 1.1.2 | — |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.08.3HIGHAV:A/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco7.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xgm8-j45q-xvm6: Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2
ghsa_unreviewed·2022-05-24
CVE-2019-6000 [HIGH] GHSA-xgm8-j45q-xvm6: Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2
Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firmware version 1.1.8 and earlier, EOS 6D MARK II firmware version 1.0.4 and earlier, EOS 7D MARK II firmware version 1.1.2 and earlier, EOS 70 D firmware version 1.1.2 and earlier, EOS 80 D firmware version 1.0.2 and earlier, EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier, EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and ear
Chrome
Stable Channel Update for Desktop : CVE-2019-5850
vendor_chrome·2019-07-30·CVSS 9.6
CVE-2019-5850 [HIGH] Stable Channel Update for Desktop : CVE-2019-5850
Stable Channel Update for Desktop
CVE-2019-5850: Use-after-free in offline page fetcher. Reported by Brendon Tiszka on 2019-06-21 [$6000][ 956947 ] High CVE-2019-5860: Use-after-free in PDFium
Reported by Anonymous on 2019-04-26 [$3000][ 976627 ] High CVE-2019-5853: Memory corruption in regexp length check
Severity: high
Cisco
Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability
vendor_cisco·2019-03-06·CVSS 7.4
CVE-2019-1595 [HIGH] CWE-913 Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability
Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability
A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device.
The vulnerability is due to an incorrect allocation of an internal interface index. An adjacent attacker with the ability to submit a crafted FCoE packet that crosses affected interfaces could trigger this vulnerability. A successful exploit could allow the attacker to cause a packet loop and high throughput on the affected interfaces, resulting in a DoS condition.
Cisco has released software updates that address this vulnerability. There are no workarounds that addr
Cisco
Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2019-1595 Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability
CVE-2019-1595: Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability
A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an incorrect allocation of an internal interface index. An adjacent attacker with the ability to submit a crafted FCoE packet that crosses affected interfaces could trigger this vulnerability. A successful exploit could allow the attacker to cause a packet loop and high throughput on the affected interfaces, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no
CVSS: 3.0
No detection rules found.
No public exploits indexed.
http://jvn.jp/en/vu/JVNVU97511331/index.htmlhttps://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.htmlhttps://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/https://www.canon-europe.com/support/product-security/https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/the-vulnerability-in-canon-digital-camerashttp://jvn.jp/en/vu/JVNVU97511331/index.htmlhttps://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.htmlhttps://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/https://www.canon-europe.com/support/product-security/https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/the-vulnerability-in-canon-digital-cameras
2019-08-06
Published