CVE-2012-5964

CVE-2012-5964 is a stack-based buffer overflow in libupnp’s unique_service_name() (ssdp_server.c) of the Portable SDK for UPnP Devices. Exploitation via a long ServiceType in a UDP packet could allow remote code execution. OpenSUSE openSUSE-SU-2013:0255-1 (and related advisories for libupnp) desc...

CVE-2012-5962

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType aka urn field in a UDP pack...

CVE-2012-5965

Removed by vendor...

CVE-2012-5963

Removed by vendor...

CVE-2012-5962

Removed by vendor...

CVE-2012-5958

Removed by vendor...

CVE-2012-5964

Removed by vendor...

CVE-2012-5961

CVE-2012-5961 affects the Portable SDK for UPnP Devices (libupnp) 1.3.1, where a stack-based buffer overflow in unique_service_name() in ssdp/ssdp_server.c allows remote attackers to execute arbitrary code via a long UDN in a UDP packet. Connected advisories show multiple vendor updates (e.g., op...

CVE-2012-5965

CVE-2012-5965 describes a stack-based buffer overflow in the unique_service_name() function of the SSDP parser within the Portable SDK for UPnP Devices (libupnp), specifically in the open-source UPnP library (libupnp) version 1.3.1. The vulnerability can be triggered by a long DeviceType (urn dev...

CVE-2012-5958

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string th...

CVE-2012-5965

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType aka urn device field in a U...

CVE-2013-0229

The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service service crash via a crafted request that triggers a buffer over-read...

CVE-2012-5962

CVE-2012-5962 is a stack-based buffer overflow in the unique_service_name function of the UPnP Portable SDK (libupnp) used by many devices. The overflow occurs in the SSDP parser when processing a long DeviceType/urn in UDP traffic, enabling potential remote code execution. Public advisories (ope...

CVE-2012-5959

CVE-2012-5959 is a stack-based buffer overflow in libupnp’s unique_service_name() in the SSDP parser, triggered by a long UDN containing :: in UDP SSDP requests. Affects portable SDK for UPnP Devices/libupnp before 1.6.18; remote attacker could cause arbitrary code execution. Public advisories sh...

CVE-2012-5958

CVE-2012-5958 is a stack-based buffer overflow in the unique_service_name() function of the SSDP parser in the Portable SDK for UPnP Devices (libupnp). It allows remote attackers to execute arbitrary code via crafted SSDP/UPnP traffic before version 1.6.18. Public advisories note the vulnerabilit...

CVE-2012-5961

Removed by vendor...

CVE-2012-5960

Removed by vendor...

UPnP unique_service_name Buffer Overflow

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string th...

Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities

The Portable Software Developer Kit SDK for Universal Plug-n-Play UPnP Devices contains a libupnp library, originally known as the Intel SDK for UPnP Devices, which is vulnerable to multiple stack-based buffer overflows when handling malicious Simple Service Discovery Protocol SSDP requests. This...

CERT Releases UPnP Security Advisory

Multiple vulnerabilities have been announced in libupnp, the open source portable SDK for UPnP devices. Libupnp is employed by hundreds of vendors for UPnP-enabled devices. Information is also available in CERT Vulnerability Note VU922681. US-CERT recommends that affected UPnP device vendors and...