CVE:CVE-2014-1201
CNNVD:CNNVD-201401-182
Lorex Edge LH310和Edge+ LH320 Series是美国Lorex科技公司的Edge系列数字视频录像机产品。
Lorex Technologies中的INetViewX ActiveX控件中存在缓冲区溢出漏洞。远程攻击者可借助HTTP_PORT参数中的长字符串利用该漏洞造成拒绝服务（崩溃）并执行任意代码。以下版本受到影响：Lorex Edge LH310和Edge+ LH320 series with firmware 7-35-28-1B26E版本，Edge2 LH330 series with firmware 11.17.38-33_1D97A版本，Edge3 LH340 series with firmware 11.19.85_1FE3A版本。
solution:Upgrade lorex_technology edge_lh310_firmware to a higher version than 7-35-28-1b26e,and avoid the version 7-35-28-1b26e; Upgrade lorextechnology edge to a higher version than lh310,and avoid the version lh310; Upgrade lorex_technology edge3_lh340_firmware to a higher version than 11.19.85_1fe3a,and avoid the version 11.19.85_1fe3a; Upgrade lorextechnology edge3 to a higher version than lh340,and avoid the version lh340; Upgrade lorex_technology edge2_lh330_firmware to a higher version than 11.17.38-33_1d97a,and avoid the version 11.17.38-33_1d97a; Upgrade lorextechnology edge2 to a higher version than lh330,and avoid the version lh330; Upgrade lorex_technology edge+_lh320_firmware to a higher version than 7-35-28-1b26e,and avoid the version 7-35-28-1b26e; Upgrade lorextechnology edge+ to a higher version than lh320,and avoid the version lh320