mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
112 lines
4.2 KiB
JSON
112 lines
4.2 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "cert@cert.org",
|
|
"ID": "CVE-2012-5965",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "n/a",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn device) field in a UDP packet."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "20130129 Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities",
|
|
"refsource": "CISCO",
|
|
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp"
|
|
},
|
|
{
|
|
"name": "MDVSA-2013:098",
|
|
"refsource": "MANDRIVA",
|
|
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:098"
|
|
},
|
|
{
|
|
"name": "https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf",
|
|
"refsource": "MISC",
|
|
"url": "https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf"
|
|
},
|
|
{
|
|
"name": "DSA-2615",
|
|
"refsource": "DEBIAN",
|
|
"url": "http://www.debian.org/security/2013/dsa-2615"
|
|
},
|
|
{
|
|
"name": "DSA-2614",
|
|
"refsource": "DEBIAN",
|
|
"url": "http://www.debian.org/security/2013/dsa-2614"
|
|
},
|
|
{
|
|
"name": "57602",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/57602"
|
|
},
|
|
{
|
|
"name": "https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb",
|
|
"refsource": "MISC",
|
|
"url": "https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb"
|
|
},
|
|
{
|
|
"name": "http://pupnp.sourceforge.net/ChangeLog",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://pupnp.sourceforge.net/ChangeLog"
|
|
},
|
|
{
|
|
"name": "https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play",
|
|
"refsource": "MISC",
|
|
"url": "https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play"
|
|
},
|
|
{
|
|
"name": "VU#922681",
|
|
"refsource": "CERT-VN",
|
|
"url": "http://www.kb.cert.org/vuls/id/922681"
|
|
},
|
|
{
|
|
"name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037",
|
|
"refsource": "CONFIRM",
|
|
"url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037"
|
|
}
|
|
]
|
|
}
|
|
} |