Filtered by vendor Miniupnp Project
Subscribe
Total
24 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2013-0230 | 1 Miniupnp Project | 1 Miniupnpd | 2016-12-07 | 10.0 HIGH | N/A |
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method. | |||||
CVE-2013-1462 | 1 Miniupnp Project | 1 Miniupnpd | 2015-10-08 | 7.8 HIGH | N/A |
Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (incorrect memory copy) via a SOAPAction header that lacks a " (double quote) character, a different vulnerability than CVE-2013-0230. | |||||
CVE-2013-1461 | 1 Miniupnp Project | 1 Miniupnpd | 2015-10-08 | 7.8 HIGH | N/A |
The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and service crash) via a SOAPAction header that lacks a # (pound sign) character, a different vulnerability than CVE-2013-0230. | |||||
CVE-2013-0229 | 1 Miniupnp Project | 1 Miniupnpd | 2015-10-08 | 7.8 HIGH | N/A |
The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read. |