Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCertccCVE-2012-5963
HistoryJan 31, 2013 - 9:55 p.m.

CVE-2012-5963

2013-01-3121:55:01
CWE-119
certcc
web.nvd.nist.gov
48
cve-2012-5963
stack-based buffer overflow
unique_service_name
ssdp_server.c
libupnp
upnp
sdk
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.924

Percentile

99.0%

JSON

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that lacks a :: (colon colon) in a UDP packet.

Affected configurations

Nvd
Node
portable_sdk_for_upnp_projectportable_sdk_for_upnpMatch1.3.1
VendorProductVersionCPE
portable_sdk_for_upnp_projectportable_sdk_for_upnp1.3.1cpe:/a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.3.1:::

References

Related

nvd 1
debiancve 1
prion 1
ubuntucve 1
cvelist 1
fedora 5
nessus 11
openvas 16
freebsd 1
attackerkb 1
cert 1
debian 2
cisco 1
securityvulns 1
nvd
nvd
CVE-2012-5963
2013-01-31 21:55:01
debiancve
debiancve
CVE-2012-5963
2013-01-31 21:55:00
prion
prion
Stack overflow
2013-01-31 21:55:00
ubuntucve
ubuntucve
CVE-2012-5963
2013-01-31 00:00:00
cvelist
cvelist
CVE-2012-5963
2013-01-31 21:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: libupnp-1.6.18-1.fc18
2013-02-12 05:32:58
[SECURITY] Fedora 16 Update: libupnp-1.6.18-1.fc16
2013-02-12 05:34:07
[SECURITY] Fedora 17 Update: libupnp-1.6.18-1.fc17
2013-02-12 05:10:57
nessus
nessus
Debian DSA-2614-1 : libupnp - several vulnerabilities
2013-02-04 00:00:00
Fedora 17 : mediatomb-0.12.1-23.fc17 (2013-2352)
2013-02-21 00:00:00
Portable SDK for UPnP Devices (libupnp) < 1.6.18 Multiple Stack-based Buffer Overflows RCE
2013-02-01 00:00:00
openvas
openvas
libupnp Multiple Buffer Overflow Vulnerabilities (TCP)
2013-02-06 00:00:00
Debian Security Advisory DSA 2615-1 (libupnp4 - several vulnerabilities)
2013-02-01 00:00:00
Debian: Security Advisory (DSA-2614-1)
2013-01-31 00:00:00
freebsd
freebsd
upnp -- multiple vulnerabilities
2012-11-21 00:00:00
attackerkb
attackerkb
UPnP unique_service_name Buffer Overflow
2013-01-31 00:00:00
cert
cert
Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP
2013-01-29 00:00:00
debian
debian
[SECURITY] [DSA 2615-1] libupnp4 security update
2013-02-02 11:22:39
[SECURITY] [DSA 2614-1] libupnp security update
2013-02-02 10:17:31
cisco
cisco
Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities
2013-01-29 20:00:00
securityvulns
securityvulns
Broadcom chipset routers format string vulnerability
2013-02-11 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.924

Percentile

99.0%

JSON
Related for CVE-2012-5963
nvd1debiancve1prion1ubuntucve1cvelist1fedora5nessus11openvas16freebsd1attackerkb1cert1debian2cisco1securityvulns1