PT-2013-5278

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0 Description The issue is related to the dissect dvbci tpdu hdr function in the DVB-CI dissector, which does not validate a certain length value before decrementing...

CVE-2013-4078: Improper Input Validation

epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service application crash via a crafted packet...

PT-2013-4834

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.15 Wireshark versions 1.8.x through 1.8.7 Description The issue is related to the dissect capwap data function in the CAPWAP dissector, which incorrectly handles a -1 data value to represent an error...

PT-2013-4841

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.15 Wireshark versions 1.8.x through 1.8.7 Description The issue arises from the http payload subdissector function in the HTTP dissector, which fails to properly determine when to use a recursive approach...

PT-2013-5277

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0 Description The issue is related to the parseFields function in the DIS dissector, which does not properly terminate packet-data processing after finding zero...

PT-2013-4843

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.15 Wireshark versions 1.8.x through 1.8.7 Wireshark version 1.10.0 Description The issue is related to the dissect pft function in the DCP ETSI dissector, which does not properly validate a certain fragment...

PT-2013-5279

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0 Description The issue allows remote attackers to cause a denial of service loop via a crafted packet that is not properly handled by the GSM RR dissector in the...

PT-2013-5283

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0 Description The issue is related to the dissect per length determinant function in the ASN.1 PER dissector, which does not initialize a length field in certain...

PT-2013-5280

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0 Description The issue is related to multiple array index errors in the GSM A Common dissector. This can be exploited by remote attackers to cause a denial of...

PT-2013-5268

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.15 Wireshark versions 1.8.x through 1.8.7 Wireshark versions 1.10.0 through 1.10.0 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a crafte...

PT-2013-5269

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.0 through 1.10.1 Description The issue is caused by an off-by-one error in the dissect radiotap function in the Radiotap dissector. This error allows remote attackers to cause a denial of service, resulting in an...

PT-2013-5270

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x prior to 1.10.1 Description The issue is related to a double free vulnerability in the dissect dcom ActivationProperties function in the DCOM ISystemActivator dissector. This vulnerability allows remote attackers to...

PT-2013-5271

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x prior to 1.10.1 Description The issue is related to a memory leak in the dissect dcom ActivationProperties function in the DCOM ISystemActivator dissector. This allows remote attackers to cause a denial of service by...

PT-2013-5272

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.0 Description The issue is related to the DCOM ISystemActivator dissector in Wireshark, where certain index values are not properly validated. This allows remote attackers to cause a denial of service,...

PT-2013-5273

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.0 Description The issue is related to an integer signedness error in the DCOM ISystemActivator dissector. This error allows remote attackers to cause a denial of service, resulting in an assertion failure...

PT-2013-5274

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.0 Description The issue arises from the DCOM ISystemActivator dissector in Wireshark, which fails to properly determine if there are remaining packet data to process. This allows remote attackers to cause...

PT-2013-5275

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0 Description The issue is caused by an integer signedness error in the get type length function in the Bluetooth SDP dissector. This error allows remote attackers t...

PT-2013-5276

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.0 Description The issue is related to an integer signedness error in the dissect headers function in the Bluetooth OBEX dissector. This error allows remote attackers to cause a denial of service, resultin...

PT-2013-5284

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.0 Description The issue is related to the IsDFP Frame function in the PROFINET Real-Time dissector, which does not validate MAC addresses. This allows remote attackers to cause a denial of service,...

PT-2013-4840

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.7 Description The issue is related to the dissect r3 upstreamcommand queryconfig function in the Assa Abloy R3 dissector, which does not properly handle a zero-length item. This allows remote attackers to...