RSS   Vulnerabilities for 'Livex activex control'   RSS

2009-03-10
 
CVE-2009-0865

CWE-22
 

 
Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control 8.1.2 and 8.2.0 in LIVEX_~1.OCX allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument, possibly involving the PlayX and SnapShotX methods.

 

 >>> Vendor: Geovision 6 Products
Geohttpserver
Digital surveillance system
Livex activex control
Liveaudio activex control
Gv-vd8700 firmware
Gv-vr360 firmware


Copyright 2024, cxsecurity.com

 

Back to Top