NetSight
IP …
medium5.5Public exploit code

CVE-2015-8729

The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presenc…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presence of a '\0' character at the end of a date string, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.

Affected products

VendorProductAffected versions
WiresharkWireshark
Versions 1.12.0, 1.12.1, 1.12.2, 1.12.3, 1.12.4, 1.12.5

Weakness classification

CWE-20

References