CVE编号
CVE-2019-5999利用情况
暂无补丁情况
N/A披露时间
2019-08-07漏洞描述
Canon EOS-1D X等都是日本佳能（Canon）公司的产品。Canon EOS-1D X是一款EOS系列的数码相机。EOS-1D C是一款EOS系列的数码相机。PowerShot SX740 HS是一款PowerShot系列的数码相机。 Canon EOS系列和PowerShot系列电子摄像头中的PTP存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。以下产品及版本受到影响：使用2.1.0及之前版本固件的EOS-1D X；使用1.1.6及之前版本固件的EOS-1D X MKII；使用1.4.1及之前版本固件的EOS-1D C；使用1.3.5及之前版本固件的EOS 5D MARK III；使用1.2.0及之前版本固件的EOS 5D MARK IV；使用1.1.2及之前版本固件的EOS 5DS；使用1.1.2及之前版本固件的EOS 5DS R；使用1.1.8及之前版本固件的EOS 6D；使用1.0.4及之前版本固件的EOS 6D MARK II；使用1.1.2及之前版本固件的EOS 7D MARK II；使用1.1.2及之前版本固件的EOS 70 D；使用1.0.2及之前版本固件的EOS 80 D；使用1.1.5及之前版本固件的EOS KISS X7I / EOS D REBEL T5I / EOS 700D；使用1.0.0及之前版本固件的EOS KISS X8I / EOS D REBEL T6I / EOS 750D；使用1.0.1及之前版本固件的EOS KISS X9I / EOS D REBEL T7I / EOS 800D；使用1.0.1及之前版本固件的EOS KISS X7 / EOS D REBEL SL1 / EOS 100D；使用1.0.1及之前版本固件的EOS KISS X9 / EOS D REBEL SL2 / EOS 200D；使用1.0.1及之前版本固件的EOS KISS X10 / EOS D REBEL SL3 / EOS 200D / EOS 250D；使用1.0.0及之前版本固件的EOS 8000D / EOS D REBEL T6S / EOS 760D；使用1.0.2及之前版本固件的EOS 9000D / EOS 77D；使用1.0.2及之前版本固件的EOS KISS X70 / EOS D REBEL T5 / EOS 1200D；使用1.0.2及之前版本固件的EOS D REBEL T5 RE / EOS 1200D MG / EOS HI；使用1.1.0及之前版本固件的EOS KISS X80 / EOS D REBEL T6 / EOS 1300D；使用1.0.0 及之前版本固件的EOS KISS X90 / EOS D REBEL T7 / EOS 1500D / EOS 2000D；使用1.0.0 及之前版本固件的EOS D REBEL T100 / EOS 3000D / EOS 4000D；使用1.3.0及之前版本固件的EOS R；使用1.2.0及之前版本固件的EOS RP；使用1.2.0及之前版本固件的EOS RP GOLD；使用1.0.3及之前版本固件的EOS M2；使用1.2.0及之前版本固件的EOS M3；使用1.0.1及之前版本固件的EOS M5；使用1.0.1及之前版本固件的EOS M6；使用5.0.0及之前版本固件的EOS M6(China)；使用1.1.0及之前版本固件的EOS M10；使用1.1.0及之前版本固件的EOS M100；使用1.0.2及之前版本固件的EOS KISS M / EOS M50；使用1.0.1及之前版本固件的PowerShot SX740 HS；使用1.0.1及之前版本固件的PowerShot SX70 HS；使用1.0.1及之前版本固件的PowerShot G5Xmark。解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接 |
|
|---|---|
| http://jvn.jp/en/vu/JVNVU97511331/index.html | |
| https://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.html | |
| https://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/ | |
| https://www.canon-europe.com/support/product-security/ | |
| https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/... |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | canon | eos-1d_c_firmware | * |
Up to (including) 1.4.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos-1d_x_firmware | * |
Up to (including) 2.1.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos-1d_x_mkii_firmware | * |
Up to (including) 1.1.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_100d_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_1200d_firmware | * |
Up to (including) 1.0.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_1200d_mg_firmware | * |
Up to (including) 1.0.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_1300d_firmware | * |
Up to (including) 1.1.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_1500d_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_2000d_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_200d_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_250d_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_3000d_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_4000d_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_5ds_firmware | * |
Up to (including) 1.1.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_5ds_r_firmware | * |
Up to (including) 1.1.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_5d_mark_iii_firmware | * |
Up to (including) 1.3.5 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_5d_mark_iv_firmware | * |
Up to (including) 1.2.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_6d_firmware | * |
Up to (including) 1.1.8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_6d_mark_ii_firmware | * |
Up to (including) 1.0.4 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_700d_firmware | * |
Up to (including) 1.1.5 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_70d_firmware | * |
Up to (including) 1.1.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_750d_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_760d_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_77d_firmware | * |
Up to (including) 1.0.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_7d_mark_ii_firmware | * |
Up to (including) 1.1.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_8000d_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_800d_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_80d_firmware | * |
Up to (including) 1.0.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_9000d_firmware | * |
Up to (including) 1.0.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_sl1_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_sl2_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_sl3_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_t100_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_t5i_firmware | * |
Up to (including) 1.1.5 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_t5_firmware | * |
Up to (including) 1.0.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_t5_re_firmware | * |
Up to (including) 1.0.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_t6i_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_t6s_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_t6_firmware | * |
Up to (including) 1.1.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_t7i_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_d_rebel_t7_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_hi_firmware | * |
Up to (including) 1.0.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_kiss_m_firmware | * |
Up to (including) 1.0.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_kiss_x10_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_kiss_x70_firmware | * |
Up to (including) 1.0.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_kiss_x7i_firmware | * |
Up to (including) 1.1.5 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_kiss_x7_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_kiss_x80_firmware | * |
Up to (including) 1.1.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_kiss_x8i_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_kiss_x90_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_kiss_x9i_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_kiss_x9_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_m100_firmware | * |
Up to (including) 1.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_m10_firmware | * |
Up to (including) 1.1.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_m2_firmware | * |
Up to (including) 1.0.3 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_m3_firmware | * |
Up to (including) 1.2.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_m50_firmware | * |
Up to (including) 1.0.2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_m5_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_m6(china)_firmware | * |
Up to (including) 5.0.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_m6_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_rp_firmware | * |
Up to (including) 1.2.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_rp_gold_firmware | * |
Up to (including) 1.2.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | eos_r_firmware | * |
Up to (including) 1.3.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | powershot_g5xmark_ii_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | powershot_sx70_hs_firmware | * |
Up to (including) 1.1.0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | canon | powershot_sx740_hs_firmware | * |
Up to (including) 1.0.1 |
|||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos-1d_c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos-1d_x | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos-1d_x_mkii | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_100d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_1200d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_1200d_mg | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_1300d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_1500d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_2000d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_200d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_250d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_3000d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_4000d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_5ds | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_5ds_r | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_5d_mark_iii | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_5d_mark_iv | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_6d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_6d_mark_ii | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_700d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_70d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_750d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_760d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_77d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_7d_mark_ii | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_8000d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_800d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_80d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_9000d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_sl1 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_sl2 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_sl3 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_t100 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_t5 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_t5i | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_t5_re | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_t6 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_t6i | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_t6s | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_t7 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_d_rebel_t7i | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_hi | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_kiss_m | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_kiss_x10 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_kiss_x7 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_kiss_x70 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_kiss_x7i | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_kiss_x80 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_kiss_x8i | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_kiss_x9 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_kiss_x90 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_kiss_x9i | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_m10 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_m100 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_m2 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_m3 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_m5 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_m50 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_m6 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_m6(china) | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_r | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_rp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | eos_rp_gold | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | powershot_g5xmark_ii | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | powershot_sx70_hs | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | powershot_sx740_hs | - | - | |||||
- 攻击路径 相邻
- 攻击复杂度 低
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
还没有评论，来说两句吧...