wireshark: stack overflow in BER dissector

Stack consumption vulnerability in the dissectberunknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a long string in an unknown...

CVE-2010-4300

Heap-based buffer overflow in the dissectldsstransfer function epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an LDSS packet with a lon...

DEBIAN-CVE-2010-4300

Heap-based buffer overflow in the dissectldsstransfer function epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an LDSS packet with a lon...

CVE-2010-3445

Stack consumption vulnerability in the dissectberunknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a long string in an unknown...

DEBIAN-CVE-2010-3445

Stack consumption vulnerability in the dissectberunknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a long string in an unknown...

Design/Logic Flaw

epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service infinite loop via a crafted ZCL packet, related to Discover Attributes...

Heap overflow

Heap-based buffer overflow in the dissectldsstransfer function epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an LDSS packet with a lon...

Null pointer dereference

Stack consumption vulnerability in the dissectberunknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a long string in an unknown...

CVE-2010-4300

Heap-based buffer overflow in the dissectldsstransfer function epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an LDSS packet with a lon...

CVE-2010-4300

CVE-2010-4300 is a heap-based buffer overflow in Wireshark’s LDSS dissector (dissect_ldss_transfer in epan/dissectors/packet-ldss.c) affecting Wireshark 1.2.0–1.2.12 and 1.4.0–1.4.1. A crafted LDSS packet with a long digest line can trigger memory corruption, enabling a crash and potentially code...

CVE-2010-4300

Heap-based buffer overflow in the dissectldsstransfer function epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an LDSS packet with a lon...

CVE-2010-3445

Stack consumption vulnerability in the dissectberunknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a long string in an unknown...

CVE-2010-4301

epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service infinite loop via a crafted ZCL packet, related to Discover Attributes...

CVE-2010-4300: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the dissectldsstransfer function epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an LDSS packet with a lon...

PT-2010-5408

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.0 through 1.2.12 Wireshark versions 1.4.0 through 1.4.1 Description The issue is related to a heap-based buffer overflow in the dissect ldss transfer function in the LDSS dissector. This allows remote attackers to cause ...

CVE-2010-3445: Undefined Security Weakness

Stack consumption vulnerability in the dissectberunknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a long string in an unknown...

PT-2010-5409

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.0 through 1.4.1 Description The issue allows remote attackers to cause a denial of service, specifically an infinite loop, via a crafted ZCL packet. This is related to the Discover Attributes function in the ZigBee ZCL...

Wireshark - LWRES Dissector getaddrsbyname_request Buffer Overflow (Loop) (Metasploit)

$Id: wiresharklwresgetaddrbynameloop.rb 11126 2010-11-24 19:25:18Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Wireshark < 1.2.13 / 1.4.2 Multiple Vulnerabilities

The installed version of Wireshark is 1.2.x less than 1.2.13 or 1.4.x less than 1.4.2. Such versions are affected by the following vulnerabilities: - An error exists in the LDSS dissector that allows a series of malformed packets to cause a buffer overflow. 5318 - An error exists in the ZigBee ZC...

Mandriva Linux Security Advisory : wireshark (MDVSA-2010:200)

It was discovered that the ASN.1 BER dissector in wireshark was susceptible to a stack overflow CVE-2010-3445. For 2010.0 and 2010.1 wireshark was upgraded to v1.2.12 which is not vulnerable to this issue and was patched for CS4 and MES5 to resolve the vulnerability. %NASLMINLEVEL 70300 C Tenable...