Secunia Research has discovered a vulnerability in AXIS Camera Control, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the CamImage.CamImage.1 ActiveX control (AxisCamControl.ocx). This can be exploited to cause a heap-based buffer overflow by assigning an overly long string to the "image_pan_tilt" property.

Successful exploitation allows execution of arbitrary code, but requires that the user is tricked into visiting and clicking a malicious web page.

The vulnerability is confirmed in version 2.40.0.0. Prior versions may also be affected.

Solution
The vendor recommends removing the ActiveX control and using AXIS Media Control as a replacement.
Further details available in Customer Area

Provided and/or discovered by
Alin Rad Pop, Secunia Research.

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2008-58/

Axis Communications:
http://www.axis.com/techsup/software/acc/files/acc_security_update_090119.pdf

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area