2 matches found
CVE-2016-5357: Improper Input Validation
wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service application crash via a crafted file...
5.9CVSS6.8AI score0.02491EPSS
SaveExploits0References2
CVE-2009-0599: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service application crash via a malformed NetScreen snoop file...
5CVSS6AI score0.02625EPSS
SaveExploits1References2
20