NVD

Id
45736  
Name
CVE-2012-4298  
Description
Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
5.4  
Severity
Medium  
CVSS Base Score
5.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:A/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-16  
Modified Date
2015-12-02  
Seq
2012-4298  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
229595 45736 CVE-2012-4298 http://anonsvn.wireshark.org/viewvc/trunk/wiretap/vwr.c?r1=44075&r2=44074&pathrev=44075  View
229596 45736 CVE-2012-4298 http://anonsvn.wireshark.org/viewvc?revision=44075&view=revision  View
229597 45736 CVE-2012-4298 oval:org.mitre.oval:def:15777  View
229598 45736 CVE-2012-4298 GLSA-201308-05  View
229599 45736 CVE-2012-4298 55035  View
229600 45736 CVE-2012-4298 http://www.wireshark.org/security/wnpa-sec-2012-25.html  View
229601 45736 CVE-2012-4298 https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3  View
229602 45736 CVE-2012-4298 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7533  View
229603 45736 CVE-2012-4298 openSUSE-SU-2012:1067  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27999 JVNDB-2012-003706 Wireshark の Ixia IxVeriWave ファイルパーサにおける整数符号エラーの脆弱性 Wireshark の Ixia IxVeriWave ファイルパーサの wiretap/vwr.c 内の vwr_read_rec_data_ethernet 関数には、整数符号エラーの脆弱性が存在します。 CVE-2012-4298 57536 CVE-2012-4298 45736 5.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003706.html 2012-08-15 2012-11-28 View