OSVDB ID: 71554

Title: Wireshark Nokia DCT3 Trace File Handling Overflow

Info

Disclosure
Mar 01, 2011

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Mar 01, 2011

Description

 Wireshark is prone to an overflow condition. The wiretap/dct3trace.c process fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted long record in a Nokia DCT3 trace file, a context-dependent attacker can potentially execute arbitrary code.

Classification

 Location: Local / Remote, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified

Solution

 Upgrade to version 1.2.15, 1.4.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Wireshark Foundation

Wireshark

 1.2.0
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.2.10
1.2.11
1.2.12
1.2.13
1.2.14
1.4.0
1.4.1
1.4.2
1.4.3

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/71554