CVE-2012-5960

Portable SDK For Upnp < 1.6.17 - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet.

Exploits (2)

nomisec WORKING POC

by finn79426 · poc

https://github.com/finn79426/CVE-2012-5960-PoC

View Code ZIP pw:eip

exploitdb WORKING POC

rubyremoteunix

https://www.exploit-db.com/exploits/24455

View Code ZIP pw:eip

References (13)

[Various Sources] http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp

[Mailing List] http://lists.opensuse.org/opensuse-updates/2013-02/msg00013.html

[Product] http://pupnp.sourceforge.net/ChangeLog

[Patch, US Government Resource] http://www.kb.cert.org/vuls/id/922681

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2013:098

[Exploit] http://www.securityfocus.com/bid/57602

[Third Party Advisory] https://www.tenable.com/security/research/tra-2017-10

[Third Party Advisory] https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037

[Third Party Advisory] http://www.debian.org/security/2013/dsa-2614

[Third Party Advisory] http://www.debian.org/security/2013/dsa-2615

[Third Party Advisory] https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play

[Third Party Advisory] https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf

[Third Party Advisory] https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb

Scores

EPSS 0.5599

EPSS Percentile 98.1%

Details

CWE

CWE-119

Status published

Products (26)

portable_sdk_for_upnp_project/portable_sdk_for_upnp 1.4.0

portable_sdk_for_upnp_project/portable_sdk_for_upnp 1.4.1

portable_sdk_for_upnp_project/portable_sdk_for_upnp 1.4.2

portable_sdk_for_upnp_project/portable_sdk_for_upnp 1.4.3

portable_sdk_for_upnp_project/portable_sdk_for_upnp 1.4.4

portable_sdk_for_upnp_project/portable_sdk_for_upnp 1.4.5

portable_sdk_for_upnp_project/portable_sdk_for_upnp 1.4.6

portable_sdk_for_upnp_project/portable_sdk_for_upnp 1.4.7

portable_sdk_for_upnp_project/portable_sdk_for_upnp 1.6.0

portable_sdk_for_upnp_project/portable_sdk_for_upnp 1.6.1

... and 16 more

Published Jan 31, 2013

Tracked Since Feb 18, 2026