CVE-2012-5963 Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3...
HighCVSS 10.0
EPSS 36.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that lacks a :: (colon colon) in a UDP packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| portable sdk for upnp project portable sdk for upnp | = 1.3.1 | No fix listed |
References
- pupnp.sourceforge.net
- 20130129 Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities vendor-advisory
- tsd.dlink.com.tw
- tsd.dlink.com.tw
- tsd.dlink.com.tw
- tsd.dlink.com.tw
- DSA-2614 vendor-advisory
- DSA-2615 vendor-advisory
- VU#922681 patch third-party-advisory us-government-resource
- MDVSA-2013:098 vendor-advisory
- 57602 exploit vdb-entry
- community.rapid7.com
- community.rapid7.com
- community.rapid7.com
- wiki.mageia.org