CVE-2011-0024 Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted capture...
HighCVSS 9.3
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted capture file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wireshark | <= 1.0.16 | No fix listed |
| wireshark | = 0.99.2 | No fix listed |
| wireshark | = 0.99.3 | No fix listed |
| wireshark | = 0.99.4 | No fix listed |
| wireshark | = 0.99.5 | No fix listed |
| wireshark | = 0.99.6 | No fix listed |
| wireshark | = 0.99.7 | No fix listed |
| wireshark | = 0.99.8 | No fix listed |
| wireshark | = 1.0.0 | No fix listed |
| wireshark | = 1.0.1 | No fix listed |
| wireshark | = 1.0.2 | No fix listed |
| wireshark | = 1.0.3 | No fix listed |
| wireshark | = 1.0.4 | No fix listed |
| wireshark | = 1.0.5 | No fix listed |
| wireshark | = 1.0.6 | No fix listed |
| wireshark | = 1.0.7 | No fix listed |
| wireshark | = 1.0.8 | No fix listed |
| wireshark | = 1.0.9 | No fix listed |
| wireshark | = 1.0.10 | No fix listed |
| wireshark | = 1.0.11 | No fix listed |
| wireshark | = 1.0.12 | No fix listed |
| wireshark | = 1.0.13 | No fix listed |
| wireshark | = 1.0.14 | No fix listed |
| wireshark | = 1.0.15 | No fix listed |
| debian/wireshark(Debian:12) | < 1.2-0-1 | 1.2-0-1 |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/wireshark(Debian:13) | < 1.2-0-1 | 1.2-0-1 |
| debian/wireshark(Debian:14) | < 1.2-0-1 | 1.2-0-1 |
References
- 43821 third-party-advisory vendor-advisory
- RHSA-2011:0370 vendor-advisory
- ADV-2011-0719 vdb-entry vendor-advisory
- bugzilla.redhat.com
- Debian Security Tracker CVE-2011-0024 vendor-advisory