5
CVSSv2

CVE-2013-3560

Published: 25/05/2013 Updated: 30/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x prior to 1.8.7 uses an incorrect format string, which allows remote malicious users to cause a denial of service (application crash) via a malformed packet.

Vulnerable Product Search on Vulmon Subscribe to Product

opensuse opensuse 11.4

debian debian linux 7.0

opensuse opensuse 12.2

opensuse opensuse 12.3

wireshark wireshark 1.8.0

wireshark wireshark 1.8.1

wireshark wireshark 1.8.2

wireshark wireshark 1.8.3

wireshark wireshark 1.8.6

wireshark wireshark 1.8.4

wireshark wireshark 1.8.5

Vendor Advisories

Multiple vulnerabilities were discovered in the dissectors for GTPv2, ASN1 BER, PPP CCP, DCP ETSI, MPEG DSM-CC and Websocket, which could result in denial of service or the execution of arbitrary code The oldstable distribution (squeeze) is not affected For the stable distribution (wheezy), these problems have been fixed in version 182-5wheezy ...
Debian Bug report logs - #709167 wireshark: Security vulnerabilities fixed in 187 (CVE-2013-3555 to CVE-2013-3562) Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Henri Salo <henri@nervfi> Date: Tue, 21 May ...
Debian Bug report logs - #776135 wireshark: Multiple security issues in 1122 and prior versions Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: balint@balintreczeyhu Date: Sat, 24 Jan 2015 10:51:01 UTC Severity: ...
Debian Bug report logs - #780372 CVE-2015-2187 CVE-2015-2188 CVE-2015-2189 CVE-2015-2190 CVE-2015-2191 CVE-2015-2192 Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Th ...
The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmccc in the MPEG DSM-CC dissector in Wireshark 18x before 187 uses an incorrect format string, which allows remote attackers to cause a denial of service (application crash) via a malformed packet ...