CVE-2012-5960 in portable SDK for UPnP

Resumen (Inglés)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2012-11-21

Divulgación

2013-01-31

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
63475	portable SDK for UPnP unique_service_name desbordamiento de búfer	119	Prueba de concepto	Arreglo oficial	CVE-2012-5960

Fuentes

• MITRE
• NVD
• CVE Details