← back
CVE-2001-0876

CVE-2001-0876

EPSS 49.5%
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/21188unverifiedexploitdbwww.exploit-db.com/exploits/21189unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=100887440810532&w=2http://marc.info/?l=ntbugtraq&m=100887271006313&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059https://exchange.xforce.ibmcloud.com/vulnerabilities/7721http://www.cert.org/advisories/CA-2001-37.htmlhttp://www.ciac.org/ciac/bulletins/m-030.shtmlhttp://www.kb.cert.org/vuls/id/951555http://www.securityfocus.com/bid/3723