Published: 29/04/2011 Updated: 19/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 950

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x prior to 1.4.5 allows remote malicious users to execute arbitrary code via a crafted .pcap file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.4.1
wireshark wireshark 1.4.0
wireshark wireshark 1.4.3
wireshark wireshark 1.4.2
wireshark wireshark 1.4.4

#!/usr/bin/env python # Vulnerable app: Wireshark 141-144 # Author: sickness # Download : # OS: Tested it on Windows XP SP2 and SP3 but it should work on every Windows with DEP off (still working on a ROP exploit) # DATE : 17042011 # Fixed in latest version 145 # DO NOT FORGET TO FEEL THE PWNSAUCE WITH: redminecorelanbe:8800/pro ...

#!/usr/bin/env python # -*- coding: iso-8859-15 -*- a = """ \n\t-- CVE: 2011-1591 : Wireshark <= 144 packet-dectc dissect_dect() --\n # # -------- Team : Consortium-of-Pwners # -------- Author : ipv # -------- Impact : high # -------- Target : Archlinux wireshark-gtk-143-1-i686pkgtarxz # -------- Description # # This code expl ...

## # $Id: wireshark_packet_dectrb 12371 2011-04-19 16:41:58Z sinn3r $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...

## # $Id: wireshark_packet_dectrb 12364 2011-04-19 07:53:58Z sinn3r $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...

CWE-119 http://www.wireshark.org/security/wnpa-sec-2011-06.html http://openwall.com/lists/oss-security/2011/04/18/8 http://www.vupen.com/english/advisories/2011/1022 http://openwall.com/lists/oss-security/2011/04/18/2 http://www.osvdb.org/71848 http://www.exploit-db.com/exploits/17185 http://securitytracker.com/id?1025389 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5838 http://secunia.com/advisories/44172 http://www.kb.cert.org/vuls/id/243670 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5836 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058983.html http://secunia.com/advisories/44374 http://www.exploit-db.com/exploits/17195 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058900.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058993.html http://www.vupen.com/english/advisories/2011/1106 http://www.mandriva.com/security/advisories?name=MDVSA-2011:083 https://exchange.xforce.ibmcloud.com/vulnerabilities/66834 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15000 https://nvd.nist.gov https://www.exploit-db.com/exploits/17185/

CVE-2011-1591

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect