Published: 20/12/2001 Updated: 12/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote malicious users to execute arbitrary code via a NOTIFY directive with a long Location URL.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows xp
microsoft windows 98
microsoft windows 98se
microsoft windows me

source: wwwsecurityfocuscom/bid/3723/info Universal Plug and Play, or UPnP, is a service that allows for hosts to locate and use devices on the local network UPnP support ships with Windows XP and ME For Windows 98 and 98SE, it is available with Windows XP's Internet Connection Sharing client It should be noted that UPnP services are e ...

source: wwwsecurityfocuscom/bid/3723/info Universal Plug and Play, or UPnP, is a service that allows for hosts to locate and use devices on the local network UPnP support ships with Windows XP and ME For Windows 98 and 98SE, it is available with Windows XP's Internet Connection Sharing client It should be noted that UPnP services are ...

NVD-CWE-Other http://www.cert.org/advisories/CA-2001-37.html http://www.securityfocus.com/bid/3723 http://www.kb.cert.org/vuls/id/951555 http://www.ciac.org/ciac/bulletins/m-030.shtml http://marc.info/?l=bugtraq&m=100887440810532&w=2 http://marc.info/?l=ntbugtraq&m=100887271006313&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/7721 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059 https://nvd.nist.gov https://www.exploit-db.com/exploits/21188/https://www.kb.cert.org/vuls/id/951555

CVE-2001-0876

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect