CVE-2001-0876: Buffer Overflow
Published Dec 20, 2001
·Updated
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
Affected Software
4 affected components
Microsoft Windows 98SE
Microsoft Windows Me
Microsoft Windows 98=gold
Microsoft Windows XP=gold
Remediation
Patch Available
Patch Available
Event History
Dec 20, 2001
CVE Published
05:00 AM
Mar 9, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0876?
CVE-2001-0876 is considered critical due to its ability to allow remote attackers to execute arbitrary code on vulnerable systems.
2
How do I fix CVE-2001-0876?
To fix CVE-2001-0876, it is recommended to disable UPnP on affected Windows versions or upgrade to a supported operating system.
3
What versions of Windows are affected by CVE-2001-0876?
CVE-2001-0876 affects Microsoft Windows 98, Windows 98SE, Windows Me, and Windows XP.
4
Can CVE-2001-0876 be exploited remotely?
Yes, CVE-2001-0876 can be exploited remotely through a crafted NOTIFY directive containing a long Location URL.
5
What type of vulnerability is CVE-2001-0876?
CVE-2001-0876 is a buffer overflow vulnerability that can lead to arbitrary code execution.