CVE-2012-4298

Wireshark 1.8.x contains CVE-2012-4298 due to an integer signedness error in wiretap/vwr.c (Ixia IxVeriWave file parser). A crafted packet-trace file triggers a buffer overflow, allowing remote code execution. Affected: Wireshark 1.8.x prior to 1.8.2. Mitigation: upgrade to Wireshark 1.8.2 or lat...

CVE-2012-4298: Undefined Security Weakness

Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow...

Wireshark -- Multiple vulnerabilities

Wireshark reports: It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by...

CERT Warns On Critical Hole In SCADA Software By Italian Firm Progea

The U.S. Department of Homeland Security issued a bulletin on Thursday warning readers about a previously undisclosed, critical vulnerability in Movicon 11, a product used to manage critical infrastructure including the manufacturing, energy and water sectors. DHS’s Industrial Control Systems Cyb...