CVE-2016-6503 The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which allows remote attackers to cause a denial of service...
MediumCVSS 5.9
EPSS 6.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wireshark | = 2.0.0 | No fix listed |
| wireshark | = 2.0.1 | No fix listed |
| wireshark | = 2.0.2 | No fix listed |
| wireshark | = 2.0.3 | No fix listed |
| wireshark | = 2.0.4 | No fix listed |
References
- [oss-security] 20160728 CVE request: Wireshark 2.0.5 and 1.12.13 security releases mailing-list
- 92162 vdb-entry
- 1036480 vdb-entry
- www.wireshark.org vendor-advisory
- bugs.wireshark.org issue-tracking
- code.wireshark.org
- 40196 exploit
- Debian Security Tracker CVE-2016-6503 vendor-advisory