Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-5958
HistoryJan 31, 2013 - 9:55 p.m.

CVE-2012-5958

2013-01-3121:55:01
CWE-119
[email protected]
web.nvd.nist.gov
202
cve-2012-5958
buffer overflow
ssdp parser
vulnerability
upnp
libupnp
remote code execution
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.

Affected configurations

NVD
Node
libupnp_projectlibupnpRange≤1.6.17
OR
libupnp_projectlibupnpMatch1.4.0
OR
libupnp_projectlibupnpMatch1.4.1
OR
libupnp_projectlibupnpMatch1.4.2
OR
libupnp_projectlibupnpMatch1.4.3
OR
libupnp_projectlibupnpMatch1.4.4
OR
libupnp_projectlibupnpMatch1.4.5
OR
libupnp_projectlibupnpMatch1.4.6
OR
libupnp_projectlibupnpMatch1.4.7
OR
libupnp_projectlibupnpMatch1.6.0
OR
libupnp_projectlibupnpMatch1.6.1
OR
libupnp_projectlibupnpMatch1.6.2
OR
libupnp_projectlibupnpMatch1.6.3
OR
libupnp_projectlibupnpMatch1.6.4
OR
libupnp_projectlibupnpMatch1.6.5
OR
libupnp_projectlibupnpMatch1.6.6
OR
libupnp_projectlibupnpMatch1.6.7
OR
libupnp_projectlibupnpMatch1.6.8
OR
libupnp_projectlibupnpMatch1.6.9
OR
libupnp_projectlibupnpMatch1.6.10
OR
libupnp_projectlibupnpMatch1.6.11
OR
libupnp_projectlibupnpMatch1.6.12
OR
libupnp_projectlibupnpMatch1.6.13
OR
libupnp_projectlibupnpMatch1.6.14
OR
libupnp_projectlibupnpMatch1.6.15
OR
libupnp_projectlibupnpMatch1.6.16

References

Related

checkpoint_advisories 1
debiancve 1
prion 1
nvd 1
zdt 1
packetstorm 1
ubuntucve 1
cvelist 1
exploitdb 1
openvas 18
gentoo 1
nessus 12
metasploit 1
myhack58 1
fedora 5
securityvulns 1
debian 2
cert 1
cisco 1
freebsd 1
attackerkb 1
checkpoint_advisories
checkpoint_advisories
Portable SDK for UPnP Devices libupnp Device Service Name Stack Buffer Overflow (CVE-2012-5958)
2013-03-03 00:00:00
debiancve
debiancve
CVE-2012-5958
2013-01-31 21:55:00
prion
prion
Stack overflow
2013-01-31 21:55:00
nvd
nvd
CVE-2012-5958
2013-01-31 21:55:01
zdt
zdt
libupnp 1.6.18 - Stack-based buffer overflow Exploit
2020-11-27 00:00:00
packetstorm
packetstorm
libupnp 1.6.18 Denial Of Service
2020-11-26 00:00:00
ubuntucve
ubuntucve
CVE-2012-5958
2013-01-31 00:00:00
cvelist
cvelist
CVE-2012-5958
2013-01-31 21:00:00
exploitdb
exploitdb
libupnp 1.6.18 - Stack-based buffer overflow (DoS)
2020-11-27 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201403-06
2015-09-29 00:00:00
Western Digital My Cloud Multiple Products < 2.12.127 / 2.20 - 2.30 < 2.31.149 Multiple Vulnerabilities
2020-09-02 00:00:00
Fedora Update for mediatomb FEDORA-2013-2352
2013-02-22 00:00:00
gentoo
gentoo
libupnp: Arbitrary code execution
2014-03-26 00:00:00
nessus
nessus
GLSA-201403-06 : libupnp: Arbitrary code execution
2014-03-27 00:00:00
openSUSE Security Update : libupnp (openSUSE-SU-2013:0255-1)
2014-06-13 00:00:00
Mandriva Linux Security Advisory : libupnp (MDVSA-2013:098)
2013-04-20 00:00:00
metasploit
metasploit
UPnP SSDP M-SEARCH Information Discovery
2010-11-09 06:24:32
myhack58
myhack58
Next from the printer coming out will be?-- The theory of the UPnP using the status quo and risk-vulnerability warning-the black bar safety net
2019-03-29 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: mediatomb-0.12.1-23.fc18
2013-02-21 05:32:14
[SECURITY] Fedora 17 Update: mediatomb-0.12.1-23.fc17
2013-02-21 05:48:15
[SECURITY] Fedora 16 Update: libupnp-1.6.18-1.fc16
2013-02-12 05:34:07
securityvulns
securityvulns
Broadcom chipset routers format string vulnerability
2013-02-11 00:00:00
debian
debian
[SECURITY] [DSA 2614-1] libupnp security update
2013-02-02 10:17:31
[SECURITY] [DSA 2615-1] libupnp4 security update
2013-02-02 11:22:39
cert
cert
Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP
2013-01-29 00:00:00
cisco
cisco
Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities
2013-01-29 20:00:00
freebsd
freebsd
upnp -- multiple vulnerabilities
2012-11-21 00:00:00
attackerkb
attackerkb
UPnP unique_service_name Buffer Overflow
2013-01-31 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2012-5958
checkpoint_advisories1debiancve1prion1nvd1zdt1packetstorm1ubuntucve1cvelist1exploitdb1openvas18gentoo1nessus12metasploit1myhack581fedora5securityvulns1debian2cert1cisco1freebsd1attackerkb1