Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2007-2239: Axis cameras may crash or be hijacked via SaveBMP function

CVE-2007-2239 · published 19 years ago

Summary

Certain Axis network cameras and video servers use a component that can be tricked by sending an overly long request to the SaveBMP feature. This can cause the web browser to stop working or allow an attacker to run their own code on the device. Update the camera firmware to the latest version to protect against this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
axis	2100_network_camera	<= 2.39 `cpe:2.3:h:axis:2100_network_camera::::::::`
axis	2110_network_camera	<= 2.39 `cpe:2.3:h:axis:2110_network_camera::::::::`
axis	2120_network_camera	<= 2.39 `cpe:2.3:h:axis:2120_network_camera::::::::`
axis	2130_ptz_network_camera	<= 2.39 `cpe:2.3:h:axis:2130_ptz_network_camera::::::::`
axis	2400_video_server	<= 2.39 `cpe:2.3:h:axis:2400_video_server::::::::`
axis	2401_video_server	<= 2.39 `cpe:2.3:h:axis:2401_video_server::::::::`
axis	2411_video_server	<= 2.39 `cpe:2.3:h:axis:2411_video_server::::::::`
axis	2420-ir_network_camera	<= 2.39 `cpe:2.3:h:axis:2420-ir_network_camera::::::::`
axis	2420_network_camera	<= 2.39 `cpe:2.3:h:axis:2420_network_camera::::::::`
axis	panorama_ptz_camera	<= 2.39 `cpe:2.3:h:axis:panorama_ptz_camera::::::::`

Original advisory text

Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long argument.

References

http://osvdb.org/35602
http://secunia.com/advisories/25093 Patch Vendor Advisory
http://www.axis.com/techsup/software/acc/files/acc_security_update_1_00.pdf Vendor Advisory
http://www.kb.cert.org/vuls/id/355809 US Government Resource
http://www.securityfocus.com/bid/23816
http://www.vupen.com/english/advisories/2007/1663
https://exchange.xforce.ibmcloud.com/vulnerabilities/34133

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

9.3 Critical

Exploitation

12% chance of attack within 30 days

Timeline

Published7 May 2007

Updated19 Oct 2026

First seen29 Sep 2026

Sources

CVE-2007-2239 · NVD

Track software like this

Free during beta