PRIOn knowledge basePRION:CVE-2015-8726Out-of-bounds
wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
References
www.debian.org/security/2016/dsa-3505
www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
www.securityfocus.com/bid/79382
www.securitytracker.com/id/1034551
bugs.wireshark.org/bugzilla/show_bug.cgi?id=11789
bugs.wireshark.org/bugzilla/show_bug.cgi?id=11791
code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=185911de7d337246044c8e99da2f5b4bac74c0d5
code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b8fa3d463c1bdd9b84c897441e7a5c8ad1f0f292
security.gentoo.org/glsa/201604-05
www.wireshark.org/security/wnpa-sec-2015-44.html
Related
