Vulnerabilities > Portable SDK FOR Upnp Project

DATE CVE VULNERABILITY TITLE RISK
2013-01-31 CVE-2012-5965 Buffer Errors vulnerability in Portable SDK for Upnp Project Portable SDK for Upnp 1.3.1
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn device) field in a UDP packet.
network
low complexity
portable-sdk-for-upnp-project CWE-119
critical
10.0
2013-01-31 CVE-2012-5964 Buffer Errors vulnerability in Portable SDK for Upnp Project Portable SDK for Upnp 1.3.1
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long ServiceType (aka urn service) field in a UDP packet.
network
low complexity
portable-sdk-for-upnp-project CWE-119
critical
10.0
2013-01-31 CVE-2012-5963 Buffer Errors vulnerability in Portable SDK for Upnp Project Portable SDK for Upnp 1.3.1
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that lacks a :: (colon colon) in a UDP packet.
network
low complexity
portable-sdk-for-upnp-project CWE-119
critical
10.0
2013-01-31 CVE-2012-5962 Buffer Errors vulnerability in Portable SDK FOR Upnp Project Portable SDK for Upnp 1.3.1
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn) field in a UDP packet.
network
low complexity
portable-sdk-for-upnp-project CWE-119
critical
10.0
2013-01-31 CVE-2012-5960 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Portable SDK FOR Upnp Project Portable SDK FOR Upnp
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet.
network
low complexity
portable-sdk-for-upnp-project CWE-119
critical
10.0
2013-01-31 CVE-2012-5959 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Portable SDK FOR Upnp Project Portable SDK FOR Upnp
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that contains a :: (colon colon) in a UDP packet.
network
low complexity
portable-sdk-for-upnp-project CWE-119
critical
10.0