Summary
libupnp is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit these issues to execute arbitrary code in the context of the device that uses the affected library. Failed exploit attempts will likely crash the application.
libupnp versions prior to 1.6.18 are affected.
Solution
Updates are available. Please see the references for more information.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2012-5958, CVE-2012-5959, CVE-2012-5960, CVE-2012-5961, CVE-2012-5962, CVE-2012-5963, CVE-2012-5964, CVE-2012-5965 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Flash Professional JPG Object Processing BOF Vulnerability (Mac OS X)
- Adobe Reader 'XFDF' File Buffer Overflow Vulnerability (Linux)
- Citrix Provisioning Services SoapServer Buffer Overflow Vulnerability
- Adobe Audition '.ses' Multiple Buffer Overflow Vulnerabilities (Windows)
- CTorrent/Enhanced CTorrent Buffer Overflow Vulnerability