cve/2012/CVE-2012-5306.md

CVE-2012-5306

Description

Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5605 PTZ IP Network Camera, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string argument.

POC

Reference

• http://www.exploit-db.com/exploits/18673

Github

• https://github.com/anima1111/DLink-DCS-5009L