VIR Vulnerability Intelligence Relay

CVE-2012-5958

critical
Published 2013-01-31 · Modified 2026-04-29
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0

Description

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cret@cert.org — http://www.kb.cert.org/vuls/id/922681

Application impact
VendorProductVersionsFixed
libupnp_projectlibupnp{"endIncluding":"1.6.17"}
libupnp_projectlibupnp1.4.0
libupnp_projectlibupnp1.4.1
libupnp_projectlibupnp1.4.2
libupnp_projectlibupnp1.4.3
libupnp_projectlibupnp1.4.4
libupnp_projectlibupnp1.4.5
libupnp_projectlibupnp1.4.6
libupnp_projectlibupnp1.4.7
libupnp_projectlibupnp1.6.0
libupnp_projectlibupnp1.6.1
libupnp_projectlibupnp1.6.2
libupnp_projectlibupnp1.6.3
libupnp_projectlibupnp1.6.4
libupnp_projectlibupnp1.6.5
libupnp_projectlibupnp1.6.6
libupnp_projectlibupnp1.6.7
libupnp_projectlibupnp1.6.8
libupnp_projectlibupnp1.6.9
libupnp_projectlibupnp1.6.10
libupnp_projectlibupnp1.6.11
libupnp_projectlibupnp1.6.12
libupnp_projectlibupnp1.6.13
libupnp_projectlibupnp1.6.14
libupnp_projectlibupnp1.6.15
libupnp_projectlibupnp1.6.16

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.