CVE coverage
View on NVD →
CVE-2012-5958
CVSS 10.0
2 detections found
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET INFO UPnP Discovery Search Response - CVE-2012-5958 and CVE-2012-5959 Vulnerable UPnP device M2 | rev 5 | 2023-05-02 |
| snort | ET INFO UPnP Discovery Search Response - CVE-2012-5958 and CVE-2012-5959 Vulnerable UPnP device M2 | rev 5 | 2023-05-02 |