CVE-2008-5674: Darkwet Webcam XP

High severity, CVSS 9.4. EPSS: 4.5% chance of exploitation in the next 30 days.

Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component.

Affected products

• Darkwet Webcam XP: up to and including 3.72.440.0; version 1.02.432 only; version 1.02.535 only; version 1.6.945 only; version 2.20 only; version 3.72 only

Published 2008-12-19. Last modified 2026-06-16.