CVE-2012-4297

ALTO 8.3CVE-2012-4297 · Published 16/08/2012 · updated 16/06/2026

Em resumo

CVE-2012-4297 é uma vulnerabilidade ALTO (CVSS 8.3) que afeta wireshark (wireshark).
Chance de exploração nos próximos 30 dias (EPSS): 2.3%, maior que 83.1% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
wireshark wireshark	`= 1.6.0= 1.6.1= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7= 1.6.8= 1.6.9= 1.8.0= 1.8.1`	No fix yet

Description

Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet.

References

anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h · Patch
anonsvn.wireshark.org/viewvc · Patch
secunia.com/advisories/50276
secunia.com/advisories/51363
secunia.com/advisories/54425
gentoo.org/security/en/glsa/glsa-201308-05.xml
securityfocus.com/bid/55035
wireshark.org/security/wnpa-sec-2012-19.html · Vendor Advisory
blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3
bugs.wireshark.org/bugzilla/show_bug.cgi
hermes.opensuse.org/messages/15514562
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15741

Mais vulnerabilidades de wireshark

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free