PT-2011-3242 · Wireshark · Wireshark

Sickness · Published 2011-04-29 · Updated 2024-06-15 · CVE-2011-1591

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.0 through 1.4.4

Description A stack-based buffer overflow issue exists in the DECT dissector component of Wireshark, which can be exploited by remote attackers through a crafted .pcap file, potentially allowing the execution of arbitrary code.

Recommendations For Wireshark versions 1.4.0 through 1.4.4, update to version 1.4.5 or later to resolve the issue.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-1591

OPENSUSE-SU-2024:10199-1

Affected Products

Wireshark

References · 293

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/wireshark_packet_dect.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/wireshark_packet_dect.rb · Exploit
• 🔥 http://exploit-db.com/exploits/17195 · Exploit
• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5836 · Exploit
• 🔥 https://exploit-db.com/exploits/18145 · Exploit
• 🔥 https://exploit-db.com/exploits/17185 · Exploit
• 🔥 https://exploit-db.com/exploits/17195 · Exploit
• 🔥 http://exploit-db.com/exploits/17185 · Exploit
• 🔥 https://exploit-db.com/exploits/17186 · Exploit
• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5838 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2011-1591 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1591 · Security Note
• http://vupen.com/english/advisories/2011/1022 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058900.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058983.html · Vendor Advisory