String Vulnerability in Polycom HDX 'H. 323 'format

Release date:
Updated on: 2013-03-18

Affected Systems:
Polycom HDX 9000
Polycom HDX 8000
Polycom HDX 7000
Polycom HDX 6000
Description:
--------------------------------------------------------------------------------
Bugtraq id: 58525
 
Polycom HDX is a series of HD network cameras.

The Polycom HDX series uses incorrectly filtered user input as the Format Indicator of the formatted-printing function. The format string vulnerability exists in implementation, attackers can exploit this vulnerability to execute arbitrary code in the context of the affected device.
 
<* Source: Moritz Jodeit
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Polycom
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.polycom.com