CVE-2008-5674

Summary

Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/27875
• http://www.securityfocus.com/archive/1/488364/100/200/threaded
• http://securityreason.com/securityalert/4788
• http://aluigi.altervista.org/adv/webcamxp-adv.txt
• http://osvdb.org/42929
• http://secunia.com/advisories/29007
• http://www.osvdb.org/42927
• http://www.osvdb.org/42928

References

• http://www.securityfocus.com/bid/27875
• http://www.securityfocus.com/archive/1/488364/100/200/threaded
• http://securityreason.com/securityalert/4788
• http://aluigi.altervista.org/adv/webcamxp-adv.txt
• http://osvdb.org/42929
• http://secunia.com/advisories/29007
• http://www.osvdb.org/42927
• http://www.osvdb.org/42928

• ←Previous
• Next→