Veracode Vulnerability DatabaseVERACODE:24238Arbitrary Code Execution
EPSS
Percentile
89.0%
wireshark is vulnerable to arbitrary code execution. The vulnerability exists as multiple buffer overflow flaws were found in the Wireshark SigComp Universal Decompressor Virtual Machine (UDVM) dissector. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark.
References
lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
secunia.com/advisories/42877
secunia.com/advisories/43068
www.redhat.com/security/updates/classification/#moderate
www.vupen.com/english/advisories/2011/0076
www.vupen.com/english/advisories/2011/0212
www.wireshark.org/docs/relnotes/wireshark-1.2.10.html
www.wireshark.org/security/wnpa-sec-2010-03.html
www.wireshark.org/security/wnpa-sec-2010-05.html
www.wireshark.org/security/wnpa-sec-2010-07.html
access.redhat.com/errata/RHSA-2010:0625
bugs.wireshark.org/bugzilla/show_bug.cgi?id=4867
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12049
Related
