PT-2009-3754 · Wireshark+1 · Wireshark+1

Publicado 2009-04-01 · Atualizado 2024-06-15 · CVE-2009-1210

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.0.6 and earlier

Description A format string issue in the PROFINET/DCP (PN-DCP) dissector allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name.

Recommendations For Wireshark versions 1.0.6 and earlier, update to a version that contains a fix for this issue to prevent remote code execution.

Exploit

Correção

RCE

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2009-1210

DSA-1785-1

OPENSUSE-SU-2024:10199-1

RHSA-2009:1100

RHSA-2009_1100

Produtos afetados

Red Hat

Wireshark

Referências · 295

• 🔥 http://securityfocus.com/bid/34291 · Exploit
• 🔥 https://exploit-db.com/exploits/8308 · Exploit
• https://suse.com/security/cve/CVE-2015-6243 · Nota
• https://suse.com/security/cve/CVE-2014-6428 · Nota
• https://suse.com/security/cve/CVE-2013-3558 · Nota
• https://suse.com/security/cve/CVE-2013-1576 · Nota
• https://suse.com/security/cve/CVE-2011-1140 · Nota
• https://suse.com/security/cve/CVE-2012-4298 · Nota
• https://suse.com/security/cve/CVE-2013-4932 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49512 · Nota
• https://suse.com/security/cve/CVE-2011-3266 · Nota
• https://suse.com/security/cve/CVE-2011-1143 · Nota
• https://suse.com/security/cve/CVE-2014-2282 · Nota
• https://suse.com/security/cve/CVE-2014-8710 · Nota
• https://suse.com/security/cve/CVE-2012-4289 · Nota