CVE Feed

    Dashboard / CVE / CVE-2012-5964

    CVE-2012-5964

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long ServiceType (aka urn service) field in a UDP packet.

    Published:Jan 29, 2013
    Last Modified:Apr 11, 2025
    EPS:Jan 31, 2013
    EPSS Score:0.70128
    CVSS Score:10

    Affected Products

    Vendor
    Portable Sdk For Upnp Project
    Product
    Portable Sdk For Upnp

    Exploits

    http://www.securityfocus.com/bid/57602http://www.securityfocus.com/bid/57602https://www.exploit-db.com/exploits/24455

    References

    http://pupnp.sourceforge.net/ChangeLog
    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp
    http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf
    http://www.debian.org/security/2013/dsa-2614
    http://www.debian.org/security/2013/dsa-2615
    http://www.kb.cert.org/vuls/id/922681
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:098
    http://www.securityfocus.com/bid/57602
    https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play
    https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf
    https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb
    https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037
    http://pupnp.sourceforge.net/ChangeLog
    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp
    http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf
    http://www.debian.org/security/2013/dsa-2614
    http://www.debian.org/security/2013/dsa-2615
    http://www.kb.cert.org/vuls/id/922681
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:098
    http://www.securityfocus.com/bid/57602
    https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play
    https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf
    https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb
    https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High