CVE-2008-6898 : Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt

Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods.

Published 2009-08-05 22:30:00

Updated 2017-09-29 01:33:24

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute codeDenial of service

Products affected by CVE-2008-6898

Saschart » Sascam Webcam Server » Version: 2.6.5
cpe:2.3:a:saschart:sascam_webcam_server:2.6.5:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-6898

EPSS FAQ

66.18%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2008-6898

SasCam Webcam Server v.2.6.5 Get() Method Buffer Overflow

Disclosure Date: 2008-12-29

First seen: 2020-04-26

exploit/windows/fileformat/sascam_get

The SasCam Webcam Server ActiveX control is vulnerable to a buffer overflow. By passing an overly long argument via the Get method, a remote attacker could overflow a buffer and execute arbitrary code on the system with the privileges of the user. This control is not

More information

CVSS scores for CVE-2008-6898

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2008-6898

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-6898

https://www.exploit-db.com/exploits/7617
http://www.securityfocus.com/bid/33053

SaschArt SasCam Webcam Server ActiveX Control 'Get' Method Buffer Overflow Vulnerability
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/47654
http://www.exploit-db.com/exploits/14195

Jump to