CVE-2007-3488: Buffer Overflow
First published: Fri Jun 29 2007(Updated: )
Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and SNC-RX570N/W, SNC-RX570N/B, SNC-RX550N/W, SNC-RX550N/B, SNC-RX530N/W, and SNC-RX530N/B 3.00 and 2.x before 2.31; allows remote attackers to execute arbitrary code via a long first argument to the PrmSetNetworkParam method.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sony Network Camera SNC-P5 | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/24684
- http://osvdb.org/39479
- http://jvn.jp/en/jp/JVN16767117/index.html
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000012.html
- http://jvn.jp/en/jp/JVN16767117/041520/index.html
- http://pro.sony.com/bbsc/ssr/cat-securitycameras/resource.downloads.bbsccms-assets-cat-camsec-downloads-AffectedNetworkCameras.shtml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35133
- https://www.exploit-db.com/exploits/4120
Frequently Asked Questions
What is the severity of CVE-2007-3488?
CVE-2007-3488 has a high severity due to its potential to allow remote code execution through a heap-based buffer overflow.
How do I fix CVE-2007-3488?
To fix CVE-2007-3488, update your Sony Network Camera firmware to the latest version provided by Sony.
Which Sony Network Camera models are affected by CVE-2007-3488?
CVE-2007-3488 affects multiple models including SNC-RZ25N, SNC-P1, SNC-P5, SNC-CS10, SNC-CS11, SNC-DF40N, SNC-DF70N, SNC-RZ50N, and SNC-CS50N.
What types of issues can CVE-2007-3488 cause?
CVE-2007-3488 can lead to unauthorized access, data compromise, and execution of malicious code on affected cameras.
When was CVE-2007-3488 reported?
CVE-2007-3488 was reported in 2007, highlighting vulnerabilities in Sony's Network Cameras.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/sony
- canonical/sony network camera snc-p5
- version/sony network camera snc-p5/1.0