CVE coverage
View on NVD →
CVE-2012-5959
CVSS 10.0
2 detections found
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that contains a :: (colon colon) in a UDP packet.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET INFO UPnP Discovery Search Response - CVE-2012-5958 and CVE-2012-5959 Vulnerable UPnP device M2 | rev 5 | 2023-05-02 |
| snort | ET INFO UPnP Discovery Search Response - CVE-2012-5958 and CVE-2012-5959 Vulnerable UPnP device M2 | rev 5 | 2023-05-02 |