CVE-2014-10011
TRENDnet TV-IP422W and TV-IP422WN - Stack-Based Buffer Overflow in UltraCam ActiveX Control
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-10011. PoCs published by LiquidWorm.
AI-analyzed exploit summary The exploit demonstrates a stack-based buffer overflow in TRENDnet SecurView Wireless Network Camera's UltraCamX.ocx ActiveX control. It provides multiple PoC HTML scripts targeting vulnerable methods like 'SnapFileName' and 'OpenFileDlg' to trigger memory corruption and SEH overwrite.
Description
Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote attackers to execute arbitrary code via a long string to the (1) CGI_ParamSet, (2) OpenFileDlg, (3) SnapFileName, (4) Password, (5) SetCGIAPNAME, (6) AccountCode, or (7) RemoteHost function.
Exploits (1)
The exploit demonstrates a stack-based buffer overflow in TRENDnet SecurView Wireless Network Camera's UltraCamX.ocx ActiveX control. It provides multiple PoC HTML scripts targeting vulnerable methods like 'SnapFileName' and 'OpenFileDlg' to trigger memory corruption and SEH overwrite.