NVD

Id
45732  
Name
CVE-2012-4294  
Description
Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed (aka rate) value.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-16  
Modified Date
2015-12-02  
Seq
2012-4294  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
229557 45732 CVE-2012-4294 http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-erf.c?r1=44377&r2=44376&pathrev=44377  View
229558 45732 CVE-2012-4294 http://anonsvn.wireshark.org/viewvc?view=revision&revision=44377  View
229559 45732 CVE-2012-4294 oval:org.mitre.oval:def:15673  View
229560 45732 CVE-2012-4294 GLSA-201308-05  View
229561 45732 CVE-2012-4294 55035  View
229562 45732 CVE-2012-4294 http://www.wireshark.org/security/wnpa-sec-2012-16.html  View
229563 45732 CVE-2012-4294 https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3  View
229564 45732 CVE-2012-4294 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7563  View
229565 45732 CVE-2012-4294 openSUSE-SU-2012:1067  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27995 JVNDB-2012-003702 Wireshark の ERF 解析機能におけるバッファオーバーフローの脆弱性 Wireshark の ERF 解析機能の epan/dissectors/packet-erf.c 内の channelised_fill_sdh_g707_format 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2012-4294 57532 CVE-2012-4294 45732 5.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003702.html 2012-08-15 2012-11-28 View