CVE-2019-6001
published 2019-08-06CVE-2019-6001: Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version…
PriorityP432medium6.8CVSS 3.0
AVPACLPRNUINSUCHIHAH
EPSS
0.83%
53.1th percentile
Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firmware version 1.1.8 and earlier, EOS 6D MARK II firmware version 1.0.4 and earlier, EOS 7D MARK II firmware version 1.1.2 and earlier, EOS 70 D firmware version 1.1.2 and earlier, EOS 80 D firmware version 1.0.2 and earlier, EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier, EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and earlier, EOS KISS X9I / EOS D REBEL T7I / EOS 800D firmware version 1.0.1 and earlier, EOS KISS X7 / EOS D REBEL SL1 / EOS 100D firmware version 1.0.1 and earlier, EOS KISS X9 / EOS D REBEL SL2 / EOS 200D firmware version 1.0.1 and earlier, EOS KISS X10 / EOS D REBEL SL3 / EOS 200D / EOS 250D firmware version 1.0.1 and earlier, EOS 8000D / EOS D REBEL T6S / EOS 760D firmware version 1.0.0 and earlier, EOS 9000D / EOS 77D firmware version 1.0.2 and earlier, EOS KISS X70 / EOS D REBEL T5 / EOS 1200D firmware version 1.0.2 and earlier, EOS D REBEL T5 RE / EOS 1200D MG / EOS HI firmware version 1.0.2 and earlier, EOS KISS X80 / EOS D REBEL T6 / EOS 1300D firmware version 1.1.0 and earlier, EOS KISS X90 / EOS D REBEL T7 / EOS 1500D / EOS 2000D firmware version 1.0.0 and earlier, EOS D REBEL T100 / EOS 3000D / EOS 4000D firmware version 1.0.0 and earlier, EOS R firmware version 1.3.0 and earlier, EOS RP firmware version 1.2.0 and earlier, EOS RP GOLD firmware version 1.2.0 and earlier, EOS M2 firmware version 1.0.3 and earlier, EOS M3 firmware version 1.2.0 and earlier, EOS M5 firmware version 1.0.1 and earlier, EOS M6 firmware version 1.0.1 and earlier, EOS M6(China) firmware version 5.0.0
Affected
66 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canon | eos-1d_c_firmware | <= 1.4.1 | — |
| canon | eos-1d_x_firmware | <= 2.1.0 | — |
| canon | eos-1d_x_mkii_firmware | <= 1.1.6 | — |
| canon | eos_100d_firmware | <= 1.0.1 | — |
| canon | eos_1200d_firmware | <= 1.0.2 | — |
| canon | eos_1200d_mg_firmware | <= 1.0.2 | — |
| canon | eos_1300d_firmware | <= 1.1.0 | — |
| canon | eos_1500d_firmware | <= 1.0.0 | — |
| canon | eos_2000d_firmware | <= 1.0.0 | — |
| canon | eos_200d_firmware | <= 1.0.1 | — |
| canon | eos_250d_firmware | <= 1.0.1 | — |
| canon | eos_3000d_firmware | <= 1.0.0 | — |
| canon | eos_4000d_firmware | <= 1.0.0 | — |
| canon | eos_5d_mark_iii_firmware | <= 1.3.5 | — |
| canon | eos_5d_mark_iv_firmware | <= 1.2.0 | — |
| canon | eos_5ds_firmware | <= 1.1.2 | — |
| canon | eos_5ds_r_firmware | <= 1.1.2 | — |
| canon | eos_6d_firmware | <= 1.1.8 | — |
| canon | eos_6d_mark_ii_firmware | <= 1.0.4 | — |
| canon | eos_700d_firmware | <= 1.1.5 | — |
| canon | eos_70d_firmware | <= 1.1.2 | — |
| canon | eos_750d_firmware | <= 1.0.0 | — |
| canon | eos_760d_firmware | <= 1.0.0 | — |
| canon | eos_77d_firmware | <= 1.0.2 | — |
| canon | eos_7d_mark_ii_firmware | <= 1.1.2 | — |
CVSS provenance
nvdv3.06.8MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f43m-jmxf-cf4v: Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2
ghsa_unreviewed·2022-05-24
CVE-2019-6001 [HIGH] CWE-119 GHSA-f43m-jmxf-cf4v: Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2
Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firmware version 1.1.8 and earlier, EOS 6D MARK II firmware version 1.0.4 and earlier, EOS 7D MARK II firmware version 1.1.2 and earlier, EOS 70 D firmware version 1.1.2 and earlier, EOS 80 D firmware version 1.0.2 and earlier, EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier, EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and ear
Citrix
CVE-2019-11634 - Remote Code Execution Vulnerability in Citrix Workspace app and Receiver for Windows
vendor_citrix·CVSS 9.8
CVE-2019-11634 [CRITICAL] CVE-2019-11634 - Remote Code Execution Vulnerability in Citrix Workspace app and Receiver for Windows
CVE-2019-11634 - Remote Code Execution Vulnerability in Citrix Workspace app and Receiver for Windows
of Problem A vulnerability has been identified in Citrix Workspace app and Receiver for Windows that could result in local drive access preferences not being enforced allowing an attacker read/write access to the clients local drives which could enable code execution on the client device. This vulnerability has been assigned the following CVE number: • CVE-2019-11634: Remote Code Execution Vulnerability in Citrix Workspace app for Windows prior to version 1904 and Receiver for Windows to LTSR 4.9 CU6 version earlier than 4.9.6001. This vulnerability affects all versions of Citrix Workspace app for Windows and Receiver for Windows the fix is contained in Citrix Workspace app version 1904 o
No detection rules found.
No public exploits indexed.
http://jvn.jp/en/vu/JVNVU97511331/index.htmlhttps://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.htmlhttps://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/https://www.canon-europe.com/support/product-security/https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/the-vulnerability-in-canon-digital-camerashttp://jvn.jp/en/vu/JVNVU97511331/index.htmlhttps://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.htmlhttps://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/https://www.canon-europe.com/support/product-security/https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/the-vulnerability-in-canon-digital-cameras
2019-08-06
Published