CVE-2010-2995 The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute a...
HighCVSS 10.0
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, different vulnerabilities than CVE-2010-2287.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wireshark | = 0.10.8 | No fix listed |
| wireshark | = 0.10.9 | No fix listed |
| wireshark | = 0.10.10 | No fix listed |
| wireshark | = 0.10.11 | No fix listed |
| wireshark | = 0.10.12 | No fix listed |
| wireshark | = 0.10.13 | No fix listed |
| wireshark | = 0.10.14 | No fix listed |
| wireshark | = 1.0.0 | No fix listed |
| wireshark | = 1.0.1 | No fix listed |
| wireshark | = 1.0.2 | No fix listed |
| wireshark | = 1.0.3 | No fix listed |
| wireshark | = 1.0.4 | No fix listed |
| wireshark | = 1.0.5 | No fix listed |
| wireshark | = 1.0.6 | No fix listed |
| wireshark | = 1.0.7 | No fix listed |
| wireshark | = 1.0.8 | No fix listed |
| wireshark | = 1.0.9 | No fix listed |
| wireshark | = 1.0.10 | No fix listed |
| wireshark | = 1.0.11 | No fix listed |
| wireshark | = 1.0.12 | No fix listed |
| wireshark | = 1.0.13 | No fix listed |
| wireshark | = 1.0.14 | No fix listed |
| wireshark | = 1.2 | No fix listed |
| wireshark | = 1.2.0 | No fix listed |
| wireshark | = 1.2.1 | No fix listed |
Show 11 more
| Product | Affected versions | Fixed in |
|---|---|---|
| wireshark | = 1.2.2 | No fix listed |
| wireshark | = 1.2.3 | No fix listed |
| wireshark | = 1.2.4 | No fix listed |
| wireshark | = 1.2.5 | No fix listed |
| wireshark | = 1.2.6 | No fix listed |
| wireshark | = 1.2.7 | No fix listed |
| wireshark | = 1.2.8 | No fix listed |
| wireshark | = 1.2.9 | No fix listed |
| debian/wireshark(Debian:12) | < 1.2.10-1 | 1.2.10-1 |
| debian/wireshark(Debian:13) | < 1.2.10-1 | 1.2.10-1 |
| debian/wireshark(Debian:14) | < 1.2.10-1 | 1.2.10-1 |
References
- SUSE-SR:2011:001 vendor-advisory
- SUSE-SR:2011:002 vendor-advisory
- 42877 third-party-advisory vendor-advisory
- 43068 third-party-advisory vendor-advisory
- ADV-2011-0076 vdb-entry vendor-advisory
- ADV-2011-0212 vdb-entry vendor-advisory
- www.wireshark.org vendor-advisory
- bugs.wireshark.org
- oval:org.mitre.oval:def:12049 signature vdb-entry
- Debian Security Tracker CVE-2010-2995 vendor-advisory