Unscored severity · published Jan 23, 2008
CVE-2008-0399
Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow remote attackers to execute arbitrary code via long…
–
CVSS
8%
EPSS
No
On KEV
Description
Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow remote attackers to execute arbitrary code via long arguments to the (1) SetPort and (2) SetIpAddress methods.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.0% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SU
Surveillix · Toshiba
1.0.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0399
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0399
Exploit
http://retrogod.altervista.org/rgod_toshiba_control.html
Vendor Advisory
http://secunia.com/advisories/28557
Exploit
http://www.securityfocus.com/bid/27360
www.vupen.com
http://www.vupen.com/english/advisories/2008/0214
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/39792
www.exploit-db.com
https://www.exploit-db.com/exploits/4946