VAR-200812-0330
Vulnerability from variot - Updated: 2025-04-10 22:24Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments. Linksys WVC54GC NetCamPlayerWeb11gv2 Agent ActiveX Control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. Failed attacks will likely cause denial-of-service conditions. WVC53GC with firmware versions prior to 1.25 that include the ActiveX control are vulnerable. Linksys WVC54GC is a wireless network camera that supports 802.11g protocol. If a user is tricked into browsing a specially crafted HTML document and provides a very long input parameter to the method, it can trigger a stack overflow, causing the browser to crash or execute arbitrary commands. ----------------------------------------------------------------------
Secunia is pleased to announce the release of the annual Secunia report for 2008.
Highlights from the 2008 report: * Vulnerability Research * Software Inspection Results * Secunia Research Highlights * Secunia Advisory Statistics
Request the full 2008 Report here: http://secunia.com/advisories/try_vi/request_2008_report/
Stay Secure,
Secunia
TITLE: Linksys WVC54GCA Multiple Vulnerabilities
SECUNIA ADVISORY ID: SA34767
VERIFY ADVISORY: http://secunia.com/advisories/34767/
DESCRIPTION: pagvac has reported some vulnerabilities in Linksys WVC54GCA, which can be exploited by malicious people to disclose sensitive information or conduct cross-site scripting attacks, and by malicious users to bypass certain security restrictions.
1) The device sends e.g. login credentials in plain text after receiving a specially crafted UDP packet.
This is related to vulnerability #1 in: SA33032
2) Input passed to the "next_file" parameter in img/main.cgi is not properly verified before being used to read files. This can be exploited to read the .htpasswd file from the current directory and disclose the administrator's password.
Successful exploitation of this vulnerability requires valid user credentials.
3) Input passed to the "next_file" parameter in img/main.cgi, main.cgi, and adm/file.cgi is not properly sanitised before being returned to the user. Other versions may also be affected.
SOLUTION: Use the product in trusted networks only.
Filter malicious characters and character sequences in a web proxy.
PROVIDED AND/OR DISCOVERED BY: pagvac
ORIGINAL ADVISORY: http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/ http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/ http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/
OTHER REFERENCES: SA33032: http://secunia.com/advisories/33032/
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
.
1) A security issue is caused due to the device sending certain information (e.g. This can be exploited to gain access to sensitive information by sending a specially crafted packet to a vulnerable device.
2) A vulnerability is caused due to a boundary error in the "SetSource()" method of the NetCamPlayerWeb11gv2 ActiveX control (NetCamPlayerWeb11gv2.ocx). This can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into visiting a malicious website.
SOLUTION: Update to version 1.25.
PROVIDED AND/OR DISCOVERED BY: US-CERT credits Greg Linares, eEye
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200812-0330",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": null,
"scope": null,
"trust": 1.6,
"vendor": "linksys a division of cisco",
"version": null
},
{
"model": "wvc54gc",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "1.15"
},
{
"model": "wvc54gc",
"scope": "lte",
"trust": 1.0,
"vendor": "cisco",
"version": "1.19"
},
{
"model": "wvc54gc",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "firmware 1.25"
},
{
"model": "wvc54gc",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "1.19"
},
{
"model": "wvc54gc",
"scope": "eq",
"trust": 0.3,
"vendor": "linksys",
"version": "0"
},
{
"model": "wvc54gc",
"scope": "ne",
"trust": 0.3,
"vendor": "linksys",
"version": "1.25"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#639345"
},
{
"db": "CERT/CC",
"id": "VU#528993"
},
{
"db": "BID",
"id": "32665"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-003495"
},
{
"db": "CNNVD",
"id": "CNNVD-200812-107"
},
{
"db": "NVD",
"id": "CVE-2008-4391"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:cisco:wvc54gc",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2008-003495"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Greg Linares\u203b glinares.code@gmail.com",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200812-107"
}
],
"trust": 0.6
},
"cve": "CVE-2008-4391",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "CVE-2008-4391",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "VHN-34516",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2008-4391",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#639345",
"trust": 0.8,
"value": "2.73"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#528993",
"trust": 0.8,
"value": "1.59"
},
{
"author": "NVD",
"id": "CVE-2008-4391",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-200812-107",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-34516",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#639345"
},
{
"db": "CERT/CC",
"id": "VU#528993"
},
{
"db": "VULHUB",
"id": "VHN-34516"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-003495"
},
{
"db": "CNNVD",
"id": "CNNVD-200812-107"
},
{
"db": "NVD",
"id": "CVE-2008-4391"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments. Linksys WVC54GC NetCamPlayerWeb11gv2 Agent ActiveX Control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. Failed attacks will likely cause denial-of-service conditions. \nWVC53GC with firmware versions prior to 1.25 that include the ActiveX control are vulnerable. Linksys WVC54GC is a wireless network camera that supports 802.11g protocol. If a user is tricked into browsing a specially crafted HTML document and provides a very long input parameter to the method, it can trigger a stack overflow, causing the browser to crash or execute arbitrary commands. ----------------------------------------------------------------------\n\nSecunia is pleased to announce the release of the annual Secunia\nreport for 2008. \n\nHighlights from the 2008 report:\n * Vulnerability Research\n * Software Inspection Results\n * Secunia Research Highlights\n * Secunia Advisory Statistics\n\nRequest the full 2008 Report here:\nhttp://secunia.com/advisories/try_vi/request_2008_report/\n\nStay Secure,\n\nSecunia\n\n\n----------------------------------------------------------------------\n\nTITLE:\nLinksys WVC54GCA Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA34767\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/34767/\n\nDESCRIPTION:\npagvac has reported some vulnerabilities in Linksys WVC54GCA, which\ncan be exploited by malicious people to disclose sensitive\ninformation or conduct cross-site scripting attacks, and by malicious\nusers to bypass certain security restrictions. \n\n1) The device sends e.g. login credentials in plain text after\nreceiving a specially crafted UDP packet. \n\nThis is related to vulnerability #1 in:\nSA33032\n\n2) Input passed to the \"next_file\" parameter in img/main.cgi is not\nproperly verified before being used to read files. This can be\nexploited to read the .htpasswd file from the current directory and\ndisclose the administrator\u0027s password. \n\nSuccessful exploitation of this vulnerability requires valid user\ncredentials. \n\n3) Input passed to the \"next_file\" parameter in img/main.cgi,\nmain.cgi, and adm/file.cgi is not properly sanitised before being\nreturned to the user. Other versions may also be affected. \n\nSOLUTION:\nUse the product in trusted networks only. \n\nFilter malicious characters and character sequences in a web proxy. \n\nPROVIDED AND/OR DISCOVERED BY:\npagvac\n\nORIGINAL ADVISORY:\nhttp://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/\nhttp://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/\nhttp://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/\n\nOTHER REFERENCES:\nSA33032:\nhttp://secunia.com/advisories/33032/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. \n\n1) A security issue is caused due to the device sending certain\ninformation (e.g. This can be exploited to\ngain access to sensitive information by sending a specially crafted\npacket to a vulnerable device. \n\n2) A vulnerability is caused due to a boundary error in the\n\"SetSource()\" method of the NetCamPlayerWeb11gv2 ActiveX control\n(NetCamPlayerWeb11gv2.ocx). This can be exploited to cause a\nstack-based buffer overflow by e.g. tricking a user into visiting a\nmalicious website. \n\nSOLUTION:\nUpdate to version 1.25. \n\nPROVIDED AND/OR DISCOVERED BY:\nUS-CERT credits Greg Linares, eEye",
"sources": [
{
"db": "NVD",
"id": "CVE-2008-4391"
},
{
"db": "CERT/CC",
"id": "VU#639345"
},
{
"db": "CERT/CC",
"id": "VU#528993"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-003495"
},
{
"db": "BID",
"id": "32665"
},
{
"db": "VULHUB",
"id": "VHN-34516"
},
{
"db": "PACKETSTORM",
"id": "76983"
},
{
"db": "PACKETSTORM",
"id": "72709"
}
],
"trust": 3.6
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#639345",
"trust": 3.7
},
{
"db": "NVD",
"id": "CVE-2008-4391",
"trust": 2.9
},
{
"db": "BID",
"id": "32665",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "33032",
"trust": 1.9
},
{
"db": "CERT/CC",
"id": "VU#528993",
"trust": 0.9
},
{
"db": "JVNDB",
"id": "JVNDB-2008-003495",
"trust": 0.8
},
{
"db": "CERT/CC",
"id": "HTTP://WWW.KB.CERT.ORG/VULS/ID/WDON-7M2U52",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200812-107",
"trust": 0.6
},
{
"db": "OTHER",
"id": "NONE",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-34516",
"trust": 0.1
},
{
"db": "SECUNIA",
"id": "34767",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "76983",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "72709",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "CERT/CC",
"id": "VU#639345"
},
{
"db": "CERT/CC",
"id": "VU#528993"
},
{
"db": "VULHUB",
"id": "VHN-34516"
},
{
"db": "BID",
"id": "32665"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-003495"
},
{
"db": "PACKETSTORM",
"id": "76983"
},
{
"db": "PACKETSTORM",
"id": "72709"
},
{
"db": "CNNVD",
"id": "CNNVD-200812-107"
},
{
"db": "NVD",
"id": "CVE-2008-4391"
}
]
},
"id": "VAR-200812-0330",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULHUB",
"id": "VHN-34516"
}
],
"trust": 0.02
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"camera device"
],
"sub_category": "video camera",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
}
]
},
"last_update_date": "2025-04-10T22:24:25.610000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://home.cisco.com/en-apac/home"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2008-003495"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-34516"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-003495"
},
{
"db": "NVD",
"id": "CVE-2008-4391"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.9,
"url": "http://www.kb.cert.org/vuls/id/639345"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/32665"
},
{
"trust": 1.7,
"url": "http://www.kb.cert.org/vuls/id/wdon-7m2u52"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/33032"
},
{
"trust": 1.6,
"url": "about vulnerability notes"
},
{
"trust": 1.6,
"url": "contact us about this vulnerability"
},
{
"trust": 1.6,
"url": "provide a vendor statement"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-4391"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2008-4391"
},
{
"trust": 0.3,
"url": "http://www.linksys.com/servlet/satellite?blobcol=urldata\u0026blobheadername1=content-type\u0026blobheadername2=content-disposition\u0026blobheadervalue1=text%2fplain\u0026blobheadervalue2=inline%3b+filename%3dwvc54gc-v1"
},
{
"trust": 0.3,
"url": "http://www.linksys.com/"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/33032/"
},
{
"trust": 0.2,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "https://ieeexplore.ieee.org/abstract/document/10769424"
},
{
"trust": 0.1,
"url": "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/"
},
{
"trust": 0.1,
"url": "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/34767/"
},
{
"trust": 0.1,
"url": "http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/try_vi/request_2008_report/"
},
{
"trust": 0.1,
"url": "http://www.kb.cert.org/vuls/id/528993"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/business_solutions/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/product/20682/"
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "CERT/CC",
"id": "VU#639345"
},
{
"db": "CERT/CC",
"id": "VU#528993"
},
{
"db": "VULHUB",
"id": "VHN-34516"
},
{
"db": "BID",
"id": "32665"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-003495"
},
{
"db": "PACKETSTORM",
"id": "76983"
},
{
"db": "PACKETSTORM",
"id": "72709"
},
{
"db": "CNNVD",
"id": "CNNVD-200812-107"
},
{
"db": "NVD",
"id": "CVE-2008-4391"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "OTHER",
"id": null
},
{
"db": "CERT/CC",
"id": "VU#639345"
},
{
"db": "CERT/CC",
"id": "VU#528993"
},
{
"db": "VULHUB",
"id": "VHN-34516"
},
{
"db": "BID",
"id": "32665"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-003495"
},
{
"db": "PACKETSTORM",
"id": "76983"
},
{
"db": "PACKETSTORM",
"id": "72709"
},
{
"db": "CNNVD",
"id": "CNNVD-200812-107"
},
{
"db": "NVD",
"id": "CVE-2008-4391"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2008-12-05T00:00:00",
"db": "CERT/CC",
"id": "VU#639345"
},
{
"date": "2008-12-05T00:00:00",
"db": "CERT/CC",
"id": "VU#528993"
},
{
"date": "2008-12-09T00:00:00",
"db": "VULHUB",
"id": "VHN-34516"
},
{
"date": "2008-12-05T00:00:00",
"db": "BID",
"id": "32665"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2008-003495"
},
{
"date": "2009-04-27T15:17:22",
"db": "PACKETSTORM",
"id": "76983"
},
{
"date": "2008-12-08T17:18:51",
"db": "PACKETSTORM",
"id": "72709"
},
{
"date": "2008-12-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200812-107"
},
{
"date": "2008-12-09T00:30:00.267000",
"db": "NVD",
"id": "CVE-2008-4391"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2008-12-05T00:00:00",
"db": "CERT/CC",
"id": "VU#639345"
},
{
"date": "2008-12-05T00:00:00",
"db": "CERT/CC",
"id": "VU#528993"
},
{
"date": "2009-08-20T00:00:00",
"db": "VULHUB",
"id": "VHN-34516"
},
{
"date": "2008-12-08T17:31:00",
"db": "BID",
"id": "32665"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2008-003495"
},
{
"date": "2009-03-03T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200812-107"
},
{
"date": "2025-04-09T00:30:58.490000",
"db": "NVD",
"id": "CVE-2008-4391"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200812-107"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Linksys WVC54GC NetCamPlayerWeb11gv2 ActiveX control stack buffer overflow",
"sources": [
{
"db": "CERT/CC",
"id": "VU#639345"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200812-107"
}
],
"trust": 0.6
}
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.