CVE-2013-1462: Miniupnp Project Miniupnpd

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (incorrect memory copy) via a SOAPAction header that lacks a " (double quote) character, a different vulnerability than CVE-2013-0230.

Affected products

• Miniupnp Project Miniupnpd: version 1.0 only

Published 2013-01-31. Last modified 2026-06-16.