2 matches found
CVE-2015-8729: Improper Input Validation
The ascendseek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presence of a '\0' character at the end of a date string, which allows remote attackers to cause a denial of service out-of-bounds read and...
5.5CVSS6.4AI score0.04115EPSS
SaveExploits2References2
Wireshark - ascend_seek Static Out-of-Bounds Read
Wireshark - ascendseek Static Out-of-Bounds Read Source: https://code.google.com/p/google-security-research/issues/detail?id=646 The following crash due to a static out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tsha...
7.4AI score
SaveExploits0
20