CVE-2007-3488 - CVE House
Back to Database
Status published Critical CVE-2007-3488

Heap-based buffer overflow in the viewer ActiveX control in Sony...

Vulnerability Description

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and SNC-RX570N/W, SNC-RX570N/B, SNC-RX550N/W, SNC-RX550N/B, SNC-RX530N/W, and SNC-RX530N/B 3.00 and 2.x before 2.31; allows remote attackers to execute arbitrary code via a long first argument to the PrmSetNetworkParam method.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-3488

Credits & Attribution

No credits recorded in the NVD database.

References

More from sony

View All →
CVE-2022-27094
Sony PlayMemories Home v6.0 contains an unquoted service path which...
Medium 6.7
CVE-2021-38544
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers...
Medium 5.9
CVE-2019-19364
A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe...
High 7.8
CVE-2019-15744
The Sony Xperia Xperia XZs Android device with a build...
Low 3.3
CVE-2019-15743
The Sony Xperia Touch Android device with a build fingerprint...
Medium 5.5

Affected Vendor

Affected Software

sony network camera snc-p5
Vulnerable Versions:
1.0

Timeline

Official Publish: June 29th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.