CVE-2015-8726

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Wireshark - find_signature Stack Out-of-Bounds Read2015-12-16 · dos · multiple · Verified

Impact

wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.debian.org/security/2016/dsa-3505
• http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
• http://www.securityfocus.com/bid/79382
• http://www.securitytracker.com/id/1034551
• http://www.wireshark.org/security/wnpa-sec-2015-44.html
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11789
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11791
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=185911de7d337246044c8e99da2f5b4bac74c0d5
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8fa3d463c1bdd9b84c897441e7a5c8ad1f0f292
• https://security.gentoo.org/glsa/201604-05
• http://www.debian.org/security/2016/dsa-3505
• http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
• http://www.securityfocus.com/bid/79382
• http://www.securitytracker.com/id/1034551
• http://www.wireshark.org/security/wnpa-sec-2015-44.html
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11789
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11791
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=185911de7d337246044c8e99da2f5b4bac74c0d5
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8fa3d463c1bdd9b84c897441e7a5c8ad1f0f292
• https://security.gentoo.org/glsa/201604-05