MS01-059: Unchecked Buffer in Universal Plug and Play can Lead to System Compromise (315000)

Using a specially crafted NOTIFY directive, a remote attacker can cause code to run in the context of the Universal Plug and Play UPnP subsystem or possibly launch a denial of service attack against the affected host. Note that, under Windows XP, the UPnP subsystem operates with SYSTEM privileges...

Microsoft Security Notification Bulletin MS01-059

---------------------------------------------------------------------- Title: Unchecked Buffer in Universal Plug and Play can Lead to System Compromise Date: 20 December 2001 Software: Windows 98, Windows 98SE, Windows ME, Windows XP Impact: Run code of attacker's choice Max Risk: Critical...

ISS Security Alert: Multiple Vulnerabilities in Universal Plug and Play Service

Internet Security Systems Security Alert December 20, 2001 Multiple Vulnerabilities in Universal Plug and Play Service Synopsis: ISS X-Force is aware of multiple vulnerabilities with the Universal Plug and Play Service UPnP included with several Microsoft Windows operating systems. UPnP is a...

CVE-2001-0876

Buffer overflow in Universal Plug and Play UPnP on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL...

CVE-2001-0877

Universal Plug and Play UPnP on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via 1 a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic e.g., chargen, or 2 via a spoofed SSDP...

Microsoft Windows Universal Plug and Play service (UPNP) fails to limit the data returned in response to a NOTIFY message

Overview Microsoft Windows Universal Plug and Play UPnP is vulnerable to a denial-of-service attack that could negatively affect the performance of vulnerable machines. Description Universal Plug and Play UPnP is a system designed to allow network devices to operate together. One of the UPnP...

Microsoft Windows Universal Plug and Play (UPNP) service vulnerable to buffer overflow via malformed advertisement packets

Overview A buffer overflow in Universal Plug and Play UPnP service on Microsoft Windows XP, Microsoft Windows ME, and Microsoft Windows 98 permits an intruder to run arbitrary code on vulnerable systems. Description Universal Plug and Play UPnP is a system to allow network devices to operate...

CVE-2001-0721

Universal Plug and Play UPnP in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service memory consumption or crash via a malformed UPnP request...

CVE-2001-0721

Universal Plug and Play UPnP in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service memory consumption or crash via a malformed UPnP request...

Security Bulletin MS01-054

---------------------------------------------------------------------- Title: Invalid Universal Plug and Play Request can Disrupt System Operation Date: 01 November 2001 Software: Windows 98, Windows ME, Windows XP Impact: Denial of Service Bulletin: MS01-054 Microsoft encourages customers to...

ID Software Quake 1.9 - Denial of Service

ID Software Quake 1.9 - Denial of Service // source: https://www.securityfocus.com/bid/3051/info Quake is a very popular 3D "first-person-shooter" game from ID software. A flaw has been identified in the product's network play features which allows a maliciously designed client to prevent...

Security Update for Windows 2000 (KB899588)

A security issue has been identified in the Plug and Play service that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...

Security Update for Windows XP x64 Edition (KB931261)

A security issue has been identified in Universal Plug and Play that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...

Security Update for Windows Server 2003 (KB899588)

A security issue has been identified in the Plug and Play service that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...

Security Update for Windows XP (KB905749)

A security issue has been identified in the Plug and Play service that could allow an authenticated attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you ma...

Security Update for Windows XP (KB931261)

A security issue has been identified in Universal Plug and Play that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...

Security Update for Windows Server 2003 x64 Edition (KB899588)

A security issue has been identified in the Plug and Play service that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...

Security Update for Windows Server 2003 64-bit Itanium Edition (KB899588)

A security issue has been identified in the Plug and Play service that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...

Security Update for Windows XP (KB899588)

A security issue has been identified in the Plug and Play service that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...

Security Update for Windows XP x64 Edition (KB899588)

A security issue has been identified in the Plug and Play service that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...