CVE-2007-2239: Buffer Overflow

Published May 7, 2007
·
Updated

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument.

Affected Software

10 affected components
Axis 2100 Network Camera<=2.39
Axis 2110 Network Camera<=2.39
Axis 2120 Network Camera<=2.39
Axis 2130 Ptz Network Camera<=2.39
Axis 2400 Video Server<=2.39
Axis 2401 Video Server<=2.39
Axis 2411 Video Server<=2.39
Axis 2420-ir Network Camera<=2.39
Axis 2420 Network Camera<=2.39
Axis Panorama Ptz Camera<=2.39

Remediation

Event History

May 7, 2007
CVE Published
07:19 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2007-2239?

CVE-2007-2239 has a severity level that can lead to denial of service attacks on affected devices.

2

How do I fix CVE-2007-2239?

To fix CVE-2007-2239, users should update the AXIS Camera Control ActiveX control to version 2.40.0.0 or later.

3

Which devices are affected by CVE-2007-2239?

CVE-2007-2239 affects several models including AXIS 2100, 2110, 2120, 2130 PTZ, and AXIS 2400 series among others.

4

What type of vulnerability is CVE-2007-2239?

CVE-2007-2239 is a stack-based buffer overflow vulnerability found in the SaveBMP method of an ActiveX control.

5

Can CVE-2007-2239 be exploited remotely?

Yes, CVE-2007-2239 can be exploited remotely, allowing attackers to cause denial of service.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203