CVE-2012-5959

CVE-2012-5959 is a critical stack-based buffer overflow vulnerability in the unique_service_name function of the SSDP parser within the portable SDK for UPnP Devices (libupnp) versions prior to 1.6.18. This flaw allows remote attackers to execute arbitrary code by sending a specially crafted UDP packet containing a long UDN field. With a CVSS score of 10.0, it presents a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit modules are available in Metasploit and ExploitDB, indicating public knowledge of exploitation techniques, though there is minimal community discussion or media coverage.