Description
Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an application crash when the Login Check function is invoked.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Foscam | Foscam Video Management System | 1.1.6.6 | — |
References
- ExploitDB-47478 exploit
- Official Product Homepage product
- VulnCheck Advisory: Foscam Video Management System 1.1.6.6 Buffer Overflow Denial of Service third-party-advisory