CVE-2013-2477
CVE-2013-2477
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
EPSS 1.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16589
- http://www.wireshark.org/security/wnpa-sec-2013-12.html
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html
- http://secunia.com/advisories/52471
- http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=47888
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8383
- https://nvd.nist.gov/vuln/detail/CVE-2013-2477