CVE-2014-8756 – Panasonic Network Camera Recorder NcrCtl4.NcrNet.1 GetVOLHeader Arbitrary Write Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2014-8756

The NcrCtl4.NcrNet.1 control in Panasonic Network Camera Recorder before 4.04R03 allows remote attackers to execute arbitrary code via a crafted GetVOLHeader method call, which writes null bytes to an arbitrary address. El control NcrCtl4.NcrNet.1 en Panasonic Network Camera Recorder anterior a 4.04R03 permite a atacantes remotos ejecutar código arbitrario a través de una llamada manipulada al método GetVOLHeader, escribiendo bytes nulos en una dirección arbitraria. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Network Camera Recorder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within then NcrCtl4.NcrNet.1 control. The GetVOLHeader method can be used to write null bytes to an arbitrary address. • http://panasonic.net/pcc/cgi-bin/products/netwkcam/download_us/tbookmarka_m.cgi?m=%20&mm=2010073014092324 http://www.zerodayinitiative.com/advisories/ZDI-14-363 •