PT-2011-3242 · Wireshark · Wireshark

Sickness · Publicado 2011-04-29 · Atualizado 2024-06-15 · CVE-2011-1591

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.0 through 1.4.4

Description A stack-based buffer overflow issue exists in the DECT dissector component of Wireshark, which can be exploited by remote attackers through a crafted .pcap file, potentially allowing the execution of arbitrary code.

Recommendations For Wireshark versions 1.4.0 through 1.4.4, update to version 1.4.5 or later to resolve the issue.

Exploit

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-1591

OPENSUSE-SU-2024:10199-1

Produtos afetados

Wireshark

Referências · 293

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/wireshark_packet_dect.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/wireshark_packet_dect.rb · Exploit
• 🔥 http://exploit-db.com/exploits/17195 · Exploit
• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5836 · Exploit
• 🔥 https://exploit-db.com/exploits/18145 · Exploit
• 🔥 https://exploit-db.com/exploits/17185 · Exploit
• 🔥 https://exploit-db.com/exploits/17195 · Exploit
• 🔥 http://exploit-db.com/exploits/17185 · Exploit
• 🔥 https://exploit-db.com/exploits/17186 · Exploit
• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5838 · Exploit
• http://openwall.com/lists/oss-security/2011/04/18/8 · Nota
• https://suse.com/security/cve/CVE-2015-6243 · Nota
• https://suse.com/security/cve/CVE-2014-6428 · Nota
• https://suse.com/security/cve/CVE-2013-3558 · Nota
• https://suse.com/security/cve/CVE-2013-1576 · Nota