CVE-2001-0876
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote...
CVE-2001-0876 is a high vulnerability (CVSS 7.5) in Microsoft Windows 98, published December 20, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 49.5%, the 98th percentile. No source names a fixed version.
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
- Record
CVE-2001-0876- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
- Record
CVE-2001-0876- Updated
- 2026-11-02
EUVDEUVD-2001-0859 No score
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
- Record
EUVD-2001-0859- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fxhg-8327-3c3x No score
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote...
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
- Record
GHSA-fxhg-8327-3c3x- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows 98/XP/ME - UPnP NOTIFY Buffer Overflow (1) | 2001-12-20 |
| Exploit-DB | Microsoft Windows 98/XP/ME - UPnP NOTIFY Buffer Overflow (2) | 2001-12-20 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |