CVE-2007-3167

HIGH 7.6CVE-2007-3167 · Published 11/06/2007 · updated 16/06/2026

In short

CVE-2007-3167 is a HIGH (CVSS 7.6) vulnerability affecting mjpegcontrol (vivotek).
Chance of exploitation in the next 30 days (EPSS): 6.1%, higher than 93.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mjpegcontrol vivotek	`= 2.0.0.13`	No fix yet

Description

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value.

References

osvdb.org/39230
securityfocus.com/bid/24245
exchange.xforce.ibmcloud.com/vulnerabilities/34615
exploit-db.com/exploits/4015

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free