CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
99.4%
Wireshark’s DECT dissector contains a remote code execution vulnerability in the context of the user running a packet capture or reading a packet capture file.
Paul Makowski’s report states:
/epan/dissectors/packet-dect.c contains a stack-based buffer overflow via a call to memcpy() whose length is controlled by the attacker. Absent exploit mitigations independant of Wireshark’s default build options, an attacker is able to execute arbitrary code in the context of the user running a packet capture. On *NIX systems, such capability is frequently reserved for the root user. The overflowable buffer is pkt_bfield.Data.
An attacker may cause any active capture or .pcap dissection to crash Wireshark/tshark. Remote code execution is also possible.
Apply an Update
Upgrade to Wireshark 1.4.5. Several other security related fixes are also included in this version.
243670
Filter by status: All Affected Not Affected Unknown
Filter by content: __ Additional information available
__ Sort by: Status Alphabetical
Expand all
Javascript is disabled. Click here to view vendors.
Updated: April 18, 2011
Affected
We have not received a statement from the vendor.
We are not aware of further vendor information regarding this vulnerability.
Group | Score | Vector |
---|---|---|
Base | ||
Temporal | ||
Environmental |
Thanks to Paul Makowski working for CERT/CC for reporting this vulnerability.
This document was written by Michael Orlando.
CVE IDs: | None |
---|---|
Severity Metric: | 0.09 Date Public: |