{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000012.html",
  "dc:date": "2009-03-09T16:27+09:00",
  "dcterms:issued": "2009-03-09T16:27+09:00",
  "dcterms:modified": "2009-03-09T16:27+09:00",
  "description": "The ActiveX Control for Sony SNC series network cameras contains a heap-based buffer overflow vulnerability. \r\n\r\nThe ActiveX Control for Sony SNC series network cameras is a software to monitor images over the network using a web browser. This ActiveX Control contains a heap-based buffer overflow vulnerability triggered by the improper processing of some configuration variables.",
  "link": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000012.html",
  "sec:cpe": [
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-cs10",
      "@product": "SNC-CS10",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-cs11",
      "@product": "SNC-CS11",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-cs50n",
      "@product": "SNC-CS50N",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-cs50p",
      "@product": "SNC-CS50P",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-df40n",
      "@product": "SNC-DF40N",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-df40p",
      "@product": "SNC-DF40P",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-df50n",
      "@product": "SNC-DF50N",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-df50p",
      "@product": "SNC-DF50P",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-df70n",
      "@product": "SNC-DF70N",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-df70p",
      "@product": "SNC-DF70P",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-df80n",
      "@product": "SNC-DF80N",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-df80p",
      "@product": "SNC-DF80P",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-df85n",
      "@product": "SNC-DF85N",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-df85p",
      "@product": "SNC-DF85P",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-p1",
      "@product": "SNC-P1",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-p5",
      "@product": "SNC-P5",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-rx530n",
      "@product": "SNC-RX530N",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-rx530p",
      "@product": "SNC-RX530P",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-rx550n",
      "@product": "SNC-RX550N",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-rx550p",
      "@product": "SNC-RX550P",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-rx570n",
      "@product": "SNC-RX570N",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-rx570p",
      "@product": "SNC-RX570P",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-rz25n",
      "@product": "SNC-RZ25N",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-rz25p",
      "@product": "SNC-RZ25P",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-rz50n",
      "@product": "SNC-RZ50N",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:sony:sony_network_camera_snc-rz50p",
      "@product": "SNC-RZ50P",
      "@vendor": "Sony Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "6.8",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2009-000012",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN16767117/index.html",
      "@id": "JVN#16767117",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3488",
      "@id": "CVE-2007-3488",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-3488",
      "@id": "CVE-2007-3488",
      "@source": "NVD"
    },
    {
      "#text": "http://www.ipa.go.jp/security/english/vuln/200902_sonysnc_en.html",
      "@id": "Security Alert for Vulnerability in Sony SNC Series Network Camera",
      "@source": "IPA SECURITY ALERTS"
    },
    {
      "#text": "http://www.securityfocus.com/bid/24684",
      "@id": "24684",
      "@source": "BID"
    },
    {
      "#text": "http://xforce.iss.net/xforce/xfdb/35133",
      "@id": "35133",
      "@source": "XF"
    },
    {
      "#text": "http://osvdb.org/39479",
      "@id": "39479",
      "@source": "OSVDB"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000012.html",
      "@id": "JVNDB-2009-000012",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-119",
      "@title": "Buffer Errors(CWE-119)"
    }
  ],
  "title": "Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras"
}