NVD

Id
30741  
Name
CVE-2014-2299  
Description
Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-03-11  
Modified Date
2016-06-01  
Seq
2014-2299  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162007 30741 CVE-2014-2299 openSUSE-SU-2014:0382  View
162008 30741 CVE-2014-2299 openSUSE-SU-2014:0383  View
162009 30741 CVE-2014-2299 http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html  View
162010 30741 CVE-2014-2299 RHSA-2014:0341  View
162011 30741 CVE-2014-2299 RHSA-2014:0342  View
162012 30741 CVE-2014-2299 DSA-2871  View
162013 30741 CVE-2014-2299 33069  View
162014 30741 CVE-2014-2299 66066  View
162015 30741 CVE-2014-2299 1029907  View
162016 30741 CVE-2014-2299 http://www.wireshark.org/security/wnpa-sec-2014-04.html  View
162017 30741 CVE-2014-2299 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843  View
162018 30741 CVE-2014-2299 https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=f567435ac7140c96a5de56dbce3d5e7659af4d09  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12739 JVNDB-2014-001614 Wireshark の MPEG パーサの wiretap/mpeg.c 内の mpeg_read 関数におけるバッファオーバーフローの脆弱性 Wireshark の MPEG パーサの wiretap/mpeg.c 内の mpeg_read 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2014-2299 69586 CVE-2014-2299 30741 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001614.html 2014-03-07 2014-05-14 View