Security Advisory

CVE-2009-0865

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-03-10 14:00:00
Last updated 2024-08-07 04:48:52
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control 8.1.2 and 8.2.0 in LIVEX_~1.OCX allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument, possibly involving the PlayX and SnapShotX methods.