ID |
CVE-2001-0876
|
Summary |
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL. |
References |
|
Vulnerable Configurations |
-
cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
|
CVSS |
Base: | 7.5 (as of 12-10-2018 - 21:30) |
Impact: | |
Exploitability: | |
|
CWE |
NVD-CWE-Other |
CAPEC |
|
Access |
Vector | Complexity | Authentication |
NETWORK |
LOW |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
PARTIAL |
PARTIAL |
PARTIAL |
|
cvss-vector
via4
|
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
refmap
via4
|
bid | 3723 | bugtraq | 20011220 Multiple Remote Windows XP/ME/98 Vulnerabilities | cert | CA-2001-37 | cert-vn | VU#951555 | ciac | M-030 | ntbugtraq | 20011220 Multiple Remote Windows XP/ME/98 Vulnerabilities | xf | win-upnp-notify-bo(7721) |
|
Last major update |
12-10-2018 - 21:30 |
Published |
20-12-2001 - 05:00 |
Last modified |
12-10-2018 - 21:30 |