Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-5958
HistoryJan 31, 2013 - 9:55 p.m.

CVE-2012-5958

2013-01-3121:55:01
CWE-119
[email protected]
web.nvd.nist.gov
7

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.974

Percentile

99.9%

JSON

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.

Affected configurations

Nvd
Node
libupnp_projectlibupnpRange≤1.6.17
OR
libupnp_projectlibupnpMatch1.4.0
OR
libupnp_projectlibupnpMatch1.4.1
OR
libupnp_projectlibupnpMatch1.4.2
OR
libupnp_projectlibupnpMatch1.4.3
OR
libupnp_projectlibupnpMatch1.4.4
OR
libupnp_projectlibupnpMatch1.4.5
OR
libupnp_projectlibupnpMatch1.4.6
OR
libupnp_projectlibupnpMatch1.4.7
OR
libupnp_projectlibupnpMatch1.6.0
OR
libupnp_projectlibupnpMatch1.6.1
OR
libupnp_projectlibupnpMatch1.6.2
OR
libupnp_projectlibupnpMatch1.6.3
OR
libupnp_projectlibupnpMatch1.6.4
OR
libupnp_projectlibupnpMatch1.6.5
OR
libupnp_projectlibupnpMatch1.6.6
OR
libupnp_projectlibupnpMatch1.6.7
OR
libupnp_projectlibupnpMatch1.6.8
OR
libupnp_projectlibupnpMatch1.6.9
OR
libupnp_projectlibupnpMatch1.6.10
OR
libupnp_projectlibupnpMatch1.6.11
OR
libupnp_projectlibupnpMatch1.6.12
OR
libupnp_projectlibupnpMatch1.6.13
OR
libupnp_projectlibupnpMatch1.6.14
OR
libupnp_projectlibupnpMatch1.6.15
OR
libupnp_projectlibupnpMatch1.6.16
VendorProductVersionCPE
libupnp_projectlibupnp*cpe:2.3:a:libupnp_project:libupnp:*:*:*:*:*:*:*:*
libupnp_projectlibupnp1.4.0cpe:2.3:a:libupnp_project:libupnp:1.4.0:*:*:*:*:*:*:*
libupnp_projectlibupnp1.4.1cpe:2.3:a:libupnp_project:libupnp:1.4.1:*:*:*:*:*:*:*
libupnp_projectlibupnp1.4.2cpe:2.3:a:libupnp_project:libupnp:1.4.2:*:*:*:*:*:*:*
libupnp_projectlibupnp1.4.3cpe:2.3:a:libupnp_project:libupnp:1.4.3:*:*:*:*:*:*:*
libupnp_projectlibupnp1.4.4cpe:2.3:a:libupnp_project:libupnp:1.4.4:*:*:*:*:*:*:*
libupnp_projectlibupnp1.4.5cpe:2.3:a:libupnp_project:libupnp:1.4.5:*:*:*:*:*:*:*
libupnp_projectlibupnp1.4.6cpe:2.3:a:libupnp_project:libupnp:1.4.6:*:*:*:*:*:*:*
libupnp_projectlibupnp1.4.7cpe:2.3:a:libupnp_project:libupnp:1.4.7:*:*:*:*:*:*:*
libupnp_projectlibupnp1.6.0cpe:2.3:a:libupnp_project:libupnp:1.6.0:*:*:*:*:*:*:*
Rows per page:
1-10 of 261

References

Related

checkpoint_advisories 1
prion 1
debiancve 1
zdt 1
metasploit 2
packetstorm 1
exploitdb 2
ubuntucve 1
cve 1
cvelist 1
nessus 12
gentoo 1
openvas 18
myhack58 1
fedora 5
freebsd 1
debian 2
cisco 1
cert 1
attackerkb 1
securityvulns 1
checkpoint_advisories
checkpoint_advisories
Portable SDK for UPnP Devices libupnp Device Service Name Stack Buffer Overflow (CVE-2012-5958)
2013-03-03 00:00:00
prion
prion
Stack overflow
2013-01-31 21:55:00
debiancve
debiancve
CVE-2012-5958
2013-01-31 21:55:00
zdt
zdt
libupnp 1.6.18 - Stack-based buffer overflow Exploit
2020-11-27 00:00:00
metasploit
metasploit
Portable UPnP SDK unique_service_name() Remote Code Execution
2013-02-03 23:46:20
UPnP SSDP M-SEARCH Information Discovery
2010-11-09 06:24:32
packetstorm
packetstorm
libupnp 1.6.18 Denial Of Service
2020-11-26 00:00:00
exploitdb
exploitdb
libupnp 1.6.18 - Stack-based buffer overflow (DoS)
2020-11-27 00:00:00
Portable UPnP SDK - 'unique_service_name()' Remote Code Execution (Metasploit)
2013-02-05 00:00:00
ubuntucve
ubuntucve
CVE-2012-5958
2013-01-31 00:00:00
cve
cve
CVE-2012-5958
2013-01-31 21:55:01
cvelist
cvelist
CVE-2012-5958
2013-01-31 21:00:00
nessus
nessus
GLSA-201403-06 : libupnp: Arbitrary code execution
2014-03-27 00:00:00
Fedora 17 : mediatomb-0.12.1-23.fc17 (2013-2352)
2013-02-21 00:00:00
Debian DSA-2614-1 : libupnp - several vulnerabilities
2013-02-04 00:00:00
gentoo
gentoo
libupnp: Arbitrary code execution
2014-03-26 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201403-06
2015-09-29 00:00:00
Western Digital My Cloud Multiple Products < 2.12.127 / 2.20 - 2.30 < 2.31.149 Multiple Vulnerabilities
2020-09-02 00:00:00
libupnp Multiple Buffer Overflow Vulnerabilities (TCP)
2013-02-06 00:00:00
myhack58
myhack58
Next from the printer coming out will be?-- The theory of the UPnP using the status quo and risk-vulnerability warning-the black bar safety net
2019-03-29 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: libupnp-1.6.18-1.fc18
2013-02-12 05:32:58
[SECURITY] Fedora 16 Update: libupnp-1.6.18-1.fc16
2013-02-12 05:34:07
[SECURITY] Fedora 17 Update: mediatomb-0.12.1-23.fc17
2013-02-21 05:48:15
freebsd
freebsd
upnp -- multiple vulnerabilities
2012-11-21 00:00:00
debian
debian
[SECURITY] [DSA 2615-1] libupnp4 security update
2013-02-02 11:22:39
[SECURITY] [DSA 2614-1] libupnp security update
2013-02-02 10:17:31
cisco
cisco
Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities
2013-01-29 20:00:00
cert
cert
Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP
2013-01-29 00:00:00
attackerkb
attackerkb
UPnP unique_service_name Buffer Overflow
2013-01-31 00:00:00
securityvulns
securityvulns
Broadcom chipset routers format string vulnerability
2013-02-11 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.974

Percentile

99.9%

JSON
Related for NVD:CVE-2012-5958
checkpoint_advisories1prion1debiancve1zdt1metasploit2packetstorm1exploitdb2ubuntucve1cve1cvelist1nessus12gentoo1openvas18myhack581fedora5freebsd1debian2cisco1cert1attackerkb1securityvulns1