CVE-2009-2174

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control message.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugzilla.openedhand.com/show_bug.cgi?id=1604Exploit
http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NEWS&id=ce714a6700ce03953a2886a66ec57db59205f4e6
http://secunia.com/advisories/35472Vendor Advisory
http://secunia.com/advisories/35482Vendor Advisory
http://www.osvdb.org/55128Patch
http://www.securityfocus.com/bid/35390Exploit, Patch
http://www.vupen.com/english/advisories/2009/1597Patch, Vendor Advisory
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00494.htmlPatch
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00607.htmlPatch
http://bugzilla.openedhand.com/show_bug.cgi?id=1604Exploit
http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NEWS&id=ce714a6700ce03953a2886a66ec57db59205f4e6
http://secunia.com/advisories/35472Vendor Advisory
http://secunia.com/advisories/35482Vendor Advisory
http://www.osvdb.org/55128Patch
http://www.securityfocus.com/bid/35390Exploit, Patch
http://www.vupen.com/english/advisories/2009/1597Patch, Vendor Advisory
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00494.htmlPatch
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00607.htmlPatch

Timeline

Published: Jun 23, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-21754.3Stack-based buffer overflow in the flattenIncrementally function in flatten.c in xcftools 1.0.4, as reachable from the (1) xcf2pnm and (2) x CVE-2009-21767.5Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allow remote attackers CVE-2009-21776.8code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to conduct directory trave CVE-2009-21784.3Cross-site scripting (XSS) vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary web script or HTML CVE-2009-21797.5SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL commands via the sform[day] CVE-2009-21805.0Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary CVE-2009-21814.3Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbit CVE-2009-21826.8Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in t CVE-2009-21837.5Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary CVE-2009-21845.0Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files v CVE-2009-21855.0The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before CVE-2009-21869.3Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors,