CVE-2012-5965 in portable SDK for UPnP
요약 (영어)
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn device) field in a UDP packet.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
예약하다
2012. 11. 21.
공개
2013. 01. 31.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 63480 | portable SDK for UPnP unique_service_name 메모리 손상 | 119 | 개념 증명 | 정의되지 않음 | CVE-2012-5965 |