CVE-2008-0399

Toshiba Surveillix - Remote Code Execution via Long Arguments to SetPort or SetIpAddress Methods

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-0399. PoCs published by rgod.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Toshiba Surveillance (Surveillix) RecordSend Class (MeIpCamX.DLL 1.0.0.4) via a maliciously crafted HTML page. It uses a heap spray technique to achieve remote code execution on Internet Explorer 7 with Windows XP SP2.

Description

Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow remote attackers to execute arbitrary code via long arguments to the (1) SetPort and (2) SetIpAddress methods.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · htmlremotewindows

https://www.exploit-db.com/exploits/4946

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in Toshiba Surveillance (Surveillix) RecordSend Class (MeIpCamX.DLL 1.0.0.4) via a maliciously crafted HTML page. It uses a heap spray technique to achieve remote code execution on Internet Explorer 7 with Windows XP SP2.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Toshiba Surveillance (Surveillix) MeIpCamX.DLL 1.0.0.4

No auth needed

Prerequisites: Victim must visit a malicious webpage using Internet Explorer 7 on Windows XP SP2 · MeIpCamX.DLL 1.0.0.4 must be installed and accessible

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →