CVE-2011-1591

EPSS 41.7%

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.

Affected products

n/a · n/a

public PoCs found — 6

cve_referencewww.exploit-db.com/exploits/17185unverified cve_referencewww.exploit-db.com/exploits/17195unverified exploitdbwww.exploit-db.com/exploits/18145unverified exploitdbwww.exploit-db.com/exploits/17185unverified exploitdbwww.exploit-db.com/exploits/17186unverified exploitdbwww.exploit-db.com/exploits/17195unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058900.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058983.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058993.html http://openwall.com/lists/oss-security/2011/04/18/2 http://openwall.com/lists/oss-security/2011/04/18/8 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5836 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5838 http://secunia.com/advisories/44172 http://secunia.com/advisories/44374 http://securitytracker.com/id?1025389 https://exchange.xforce.ibmcloud.com/vulnerabilities/66834 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15000