NetSight
IP …
critical10.0Public exploit code

CVE-2009-1210

Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DC…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information.

Affected products

VendorProductAffected versions
WiresharkWireshark
through 1.0.5
Versions 0.6, 0.7.9, 0.8.16, 0.8.19, 0.9.5

Weakness classification

CWE-134

References