Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCertccCVE-2012-5964
HistoryJan 31, 2013 - 9:55 p.m.

CVE-2012-5964

2013-01-3121:55:01
CWE-119
certcc
web.nvd.nist.gov
41
cve-2012-5964
ssdp parser
buffer overflow
remote code execution
upnp
libupnp
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.924

Percentile

99.0%

JSON

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long ServiceType (aka urn service) field in a UDP packet.

Affected configurations

Nvd
Node
portable_sdk_for_upnp_projectportable_sdk_for_upnpMatch1.3.1
VendorProductVersionCPE
portable_sdk_for_upnp_projectportable_sdk_for_upnp1.3.1cpe:/a:portable_sdk_for_upnp_project:portable_sdk_for_upnp:1.3.1:::

References

Related

prion 1
debiancve 1
ubuntucve 1
cvelist 1
nvd 1
fedora 5
openvas 16
freebsd 1
nessus 11
cert 1
debian 2
cisco 1
attackerkb 1
securityvulns 1
prion
prion
Stack overflow
2013-01-31 21:55:00
debiancve
debiancve
CVE-2012-5964
2013-01-31 21:55:00
ubuntucve
ubuntucve
CVE-2012-5964
2013-01-31 00:00:00
cvelist
cvelist
CVE-2012-5964
2013-01-31 21:00:00
nvd
nvd
CVE-2012-5964
2013-01-31 21:55:01
fedora
fedora
[SECURITY] Fedora 16 Update: libupnp-1.6.18-1.fc16
2013-02-12 05:34:07
[SECURITY] Fedora 18 Update: libupnp-1.6.18-1.fc18
2013-02-12 05:32:58
[SECURITY] Fedora 17 Update: mediatomb-0.12.1-23.fc17
2013-02-21 05:48:15
openvas
openvas
Fedora Update for mediatomb FEDORA-2013-2377
2013-02-22 00:00:00
Fedora Update for libupnp FEDORA-2013-1734
2013-02-15 00:00:00
libupnp Multiple Buffer Overflow Vulnerabilities
2013-02-06 00:00:00
freebsd
freebsd
upnp -- multiple vulnerabilities
2012-11-21 00:00:00
nessus
nessus
Portable SDK for UPnP Devices (libupnp) < 1.6.18 Multiple Stack-based Buffer Overflows RCE
2013-02-01 00:00:00
Debian DSA-2614-1 : libupnp - several vulnerabilities
2013-02-04 00:00:00
Fedora 17 : mediatomb-0.12.1-23.fc17 (2013-2352)
2013-02-21 00:00:00
cert
cert
Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP
2013-01-29 00:00:00
debian
debian
[SECURITY] [DSA 2615-1] libupnp4 security update
2013-02-02 11:22:39
[SECURITY] [DSA 2614-1] libupnp security update
2013-02-02 10:17:31
cisco
cisco
Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities
2013-01-29 20:00:00
attackerkb
attackerkb
UPnP unique_service_name Buffer Overflow
2013-01-31 00:00:00
securityvulns
securityvulns
Broadcom chipset routers format string vulnerability
2013-02-11 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.924

Percentile

99.0%

JSON
Related for CVE-2012-5964
prion1debiancve1ubuntucve1cvelist1nvd1fedora5openvas16freebsd1nessus11cert1debian2cisco1attackerkb1securityvulns1