critical9.3Public exploit code
CVE-2011-1591
Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wireshark 1.4.4 - 'packet-dect.c' Remote Stack Buffer Overflow (Metasploit) (2)2011-04-19 · remote · windows · Verified
- Wireshark 1.4.4 - 'packet-dect.c' Local Stack Buffer Overflow (Metasploit) (1)2011-04-19 · local · windows · Verified
- Wireshark 1.4.1 < 1.4.4 - Local Overflow (SEH)2011-04-18 · local · windows · Verified
- Wireshark 1.4.4 - DECT Dissector Remote Buffer Overflow2011-11-22 · remote · linux
Impact
Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wireshark | Wireshark | Versions 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.4.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058900.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058983.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058993.html
- http://openwall.com/lists/oss-security/2011/04/18/2
- http://openwall.com/lists/oss-security/2011/04/18/8
- http://secunia.com/advisories/44172
- http://secunia.com/advisories/44374
- http://securitytracker.com/id?1025389
- http://www.exploit-db.com/exploits/17185
- http://www.exploit-db.com/exploits/17195
- http://www.kb.cert.org/vuls/id/243670
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:083
- http://www.osvdb.org/71848
- http://www.vupen.com/english/advisories/2011/1022
- http://www.vupen.com/english/advisories/2011/1106
- http://www.wireshark.org/security/wnpa-sec-2011-06.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5836
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5838
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66834
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15000
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058900.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058983.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058993.html
- http://openwall.com/lists/oss-security/2011/04/18/2
- http://openwall.com/lists/oss-security/2011/04/18/8