CVE-2011-1591 Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.
HighCVSS 9.3
EPSS 41.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wireshark | = 1.4.0 | No fix listed |
| wireshark | = 1.4.1 | No fix listed |
| wireshark | = 1.4.2 | No fix listed |
| wireshark | = 1.4.3 | No fix listed |
| wireshark | = 1.4.4 | No fix listed |
| debian/wireshark(Debian:12) | < 1.4.5-1 | 1.4.5-1 |
| debian/wireshark(Debian:13) | < 1.4.5-1 | 1.4.5-1 |
| debian/wireshark(Debian:14) | < 1.4.5-1 | 1.4.5-1 |
References
- Debian Security Tracker CVE-2011-1591 vendor-advisory
- FEDORA-2011-5621 vendor-advisory
- FEDORA-2011-5569 vendor-advisory
- FEDORA-2011-5529 vendor-advisory
- [oss-security] 20110418 Wireshark 1.2.16 / 1.4.5 mailing-list
- [oss-security] 20110418 Re: Wireshark 1.2.16 / 1.4.5 mailing-list
- 44172 third-party-advisory
- 44374 third-party-advisory
- 1025389 vdb-entry
- 17185 exploit
- 17195 exploit
- VU#243670 third-party-advisory us-government-resource
- MDVSA-2011:083 vendor-advisory
- 71848 vdb-entry
- ADV-2011-1022 vdb-entry vendor-advisory
- ADV-2011-1106 vdb-entry
- www.wireshark.org
- bugs.wireshark.org exploit
- bugs.wireshark.org exploit
- wireshark-dect-bo(66834) vdb-entry
- oval:org.mitre.oval:def:15000 signature vdb-entry