20011220 Multiple Remote Windows XP/ME/98 Vulnerabilitiesmailing list
http://marc.info/?l=bugtraq&m=100887440810532&w=2 CVE-2001-0876
Microsoft Windows 98/XP/ME - UPnP NOTIFY Buffer Overflow (1)
Record summary
CVE-2001-0876 has a selected CVSS score of 7.5; EIP currently links 2 catalogued exploits.
Description
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBMicrosoft Windows 98/XP/ME - UPnP NOTIFY Buffer Overflow (1)ExploitDB exploitby Gabriel MaggiottiNot analyzed1 file
ExploitDBMicrosoft Windows 98/XP/ME - UPnP NOTIFY Buffer Overflow (2)ExploitDB exploitby JOCANORNot analyzed1 file
References
920011220 Multiple Remote Windows XP/ME/98 Vulnerabilitiesmailing list
http://marc.info/?l=ntbugtraq&m=100887271006313&w=2 CA-2001-37Third-party advisory
http://www.cert.org/advisories/CA-2001-37.html M-030Third-party advisoryGovernment resource
http://www.ciac.org/ciac/bulletins/m-030.shtml VU#951555Third-party advisory
http://www.kb.cert.org/vuls/id/951555 3723vdb entry
http://www.securityfocus.com/bid/3723 MS01-059Vendor advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059 win-upnp-notify-bo(7721)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7721 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-0876