D_Link-DSR-500 漏洞

严重CVE-2012-59642013/01/31

CVE-2012-5964

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long ServiceType (aka urn service) field in a UDP packet.

D_Link-DSR-250 D_Link-DSR-150 D_Link-DSR-1000RCE

CVSS10.0EPSS 70.1%

严重CVE-2012-59632013/01/31

CVE-2012-5963

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that lacks a :: (colon colon) in a UDP packet.

D_Link-DSR-250 D_Link-DSR-150 D_Link-DSR-1000RCE

CVSS10.0EPSS 70.1%

严重CVE-2012-59622013/01/31

CVE-2012-5962

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn) field in a UDP packet.

D_Link-DSR-250 D_Link-DSR-150 D_Link-DSR-1000RCE

CVSS10.0EPSS 70.1%

严重CVE-2012-59612013/01/31

CVE-2012-5961

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka device) field in a UDP packet.

D_Link-DSR-250 D_Link-DSR-150 D_Link-DSR-1000RCE

CVSS10.0EPSS 70.1%

严重CVE-2012-59592013/01/31

CVE-2012-5959

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that contains a :: (colon colon) in a UDP packet.

D_Link-DSR-250 D_Link-DSR-150 D_Link-DSR-1000RCE

CVSS10.0EPSS 82.4%

严重CVE-2012-59582013/01/31

CVE-2012-5958

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.

D_Link-DSR-250 D_Link-DSR-150 D_Link-DSR-1000RCE

CVSS10.0EPSS 88.1%

D_Link-DSR-500

关联漏洞

CVE-2012-5964

CVE-2012-5963

CVE-2012-5962

CVE-2012-5961

CVE-2012-5959

CVE-2012-5958