Published: 16/08/2012 Updated: 19/09/2017

CVSS v2 Base Score: 8.3 | Impact Score: 10 | Exploitability Score: 6.5

VMScore: 739

Vector: AV:A/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x prior to 1.6.10 and 1.8.x prior to 1.8.2 allows remote malicious users to execute arbitrary code via a malformed packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.8.0
wireshark wireshark 1.8.1
wireshark wireshark 1.6.0
wireshark wireshark 1.6.7
wireshark wireshark 1.6.8
wireshark wireshark 1.6.9
wireshark wireshark 1.6.3
wireshark wireshark 1.6.4
wireshark wireshark 1.6.5
wireshark wireshark 1.6.6
wireshark wireshark 1.6.1
wireshark wireshark 1.6.2
sun sunos 5.11

Debian Bug report logs - #680056 wireshark: CVE-2012-4048: PPP dissector crash/segfault Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: BjÃ¸rn Mork <bjorn@morkno> Date: Tue, 3 Jul 2012 08:36:02 UTC Severi ...

Debian Bug report logs - #776135 wireshark: Multiple security issues in 1122 and prior versions Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: balint@balintreczeyhu Date: Sat, 24 Jan 2015 10:51:01 UTC Severity: ...

Debian Bug report logs - #780372 CVE-2015-2187 CVE-2015-2188 CVE-2015-2189 CVE-2015-2190 CVE-2015-2191 CVE-2015-2192 Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Th ...

CWE-119 http://www.wireshark.org/security/wnpa-sec-2012-19.html http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&r2=44306&pathrev=44307 http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7561 https://hermes.opensuse.org/messages/15514562 http://www.securityfocus.com/bid/55035 https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 http://secunia.com/advisories/51363 http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml http://secunia.com/advisories/54425 http://secunia.com/advisories/50276 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15741 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=680056

CVE-2012-4297

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect