Wireshark is prone to an overflow condition. The DECT dissector in epan/dissectors/packet-dect.c fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted packet, a remote attacker can potentially execute arbitrary code.

Upgrade to version 1.2.16 or 1.4.5 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1025389
• OVAL ID: 15000
• Exploit Database: 17185 17186 17195 18145
• CVE ID: 2011-1591 (see also: NVD)
• CERT VU: 243670
• Secunia Advisory ID: 44172 44374 44793 46343
• Bugtraq ID: 47392
• ISS X-Force ID: 66834
• Related OSVDB ID: 71846 71847
• Metasploit ID: 71848
• VUPEN Advisory: ADV-2011-1022 ADV-2011-1106
• Mail List Post: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058900.html
  http://seclists.org/fulldisclosure/2011/Oct/412
• Vendor Specific News/Changelog Entry: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058983.html
  http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058993.html
  http://lists.opensuse.org/opensuse-updates/2011-06/msg00010.html
  http://lists.opensuse.org/opensuse-updates/2011-06/msg00013.html
  http://security.gentoo.org/glsa/glsa-201110-02.xml
  http://www.wireshark.org/security/wnpa-sec-2011-06.html
  https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5836
  https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5838
• Other Advisory URL: http://openwall.com/lists/oss-security/2011/04/18/2
  http://openwall.com/lists/oss-security/2011/04/18/8
  http://www.exploit-db.com/exploits/17185
  http://www.mandriva.com/security/advisories?name=MDVSA-2011:083
• Vendor Specific Advisory URL: https://hermes.opensuse.org/messages/8699920

• Paul Makowski - Cert/CC
• sickness