CVE-2016-4085: Improper Input Validation

Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a long string in a packet...

CVE-2016-4076: Improper Access Control

epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service application crash via a crafted packet...

PT-2016-6959

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.12 Description The issue is related to the NDS dissector in Wireshark, where the epan/dissectors/packet-ncp2222.inc file does not properly maintain a ptvc data structure. This allows remote attackers to...

CVE-2014-8712: Undefined Security Weakness

The buildexpertdata function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2014-8713: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the buildexpertdata function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service application crash via a crafted packet...