CVE-2008-4391

Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco…

9.3HighCVSS base score
6.2%Exploitation in 30 daysEPSS · top 6.4% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
NonePublic exploitsnone known yet

Description

Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2.ocx on the Cisco Linksys WVC54GC wireless video camera before firmware 1.25 allows remote attackers to execute arbitrary code via long invalid arguments.

Timeline

2008
2 Oct 2008
2 Oct 2008
ID reserved
By certcc
9 Dec 20082 months later
9 Dec 2008· 2 months later
Published
2024
7 Aug 202416 years later
7 Aug 2024· 16 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2008-4391, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	2.0	High9.3	AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS (exploitation in 30 days): 6.2% · top 6.4% of all CVEs (9 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.

Affected products

n/a
- affected n/a

References

VU#639345 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
32665 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
http://www.kb.cert.org/vuls/id/WDON-7M2U52 (opens in a new tab)x_refsource_CONFIRMx_transferred
33032 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2008-4391](https://cveledger.app/badge/CVE-2008-4391.svg)](https://cveledger.app/cve/CVE-2008-4391)

Record last updated 7 Aug 2024, 10:17 UTC.