Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attac…

1. 2012-03-28 First public exploit (Metasploit exploit/windows/browser/ultramjcam_openfiledig_bof)
2. 2012-09-06 Published

71.18% chance of exploitation in the next 30 days, higher than 99.4% of all scored CVEs (FIRST EPSS, 2026-11-09).

• Metasploit exploit/windows/browser/ultramjcam_openfiledig_bof TRENDnet SecurView Internet Camera UltraMJCam OpenFileDlg Buffer Overflow metasploit exploit, normal rank, 2012-03-28
• EDB-18709 TRENDnet SecurView Internet Camera - UltraMJCam OpenFileDlg Buffer Overflow (Metasploit) remote, 2012-04-06
• EDB-18675 TRENDnet SecurView TV-IP121WN Wireless Internet Camera - UltraMJCam ActiveX Control OpenFileDlg WideCharToMultiByte Remote Stack Buffer Overflow remote, 2012-03-28
• archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2012-03/0152.html referenced PoC, tagged "exploit" by a source, unverified
• securityfocus.com http://www.securityfocus.com/bid/52760 referenced PoC, tagged "exploit" by a source, unverified
• retrogod.altervista.org http://retrogod.altervista.org/9sg_trendnet_adv.htm referenced PoC, tagged "exploit" by a source, unverified

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

• exploit-db.com /exploits/18675

  exploit

• archives.neohapsis.com /archives/bugtraq/2012-03/0152.html

  mailing-list, exploit

• securityfocus.com /bid/52760

  vdb-entry, exploit

• retrogod.altervista.org /9sg_trendnet_adv.htm

  exploit

• secunia.com /advisories/48601

  third-party-advisory, vendor-advisory

• osvdb.org /80661

  vdb-entry

• CVE List CVE-2012-4876
• NVD CVE-2012-4876

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.