CVE-2009-1210

Published: Apr 1, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information.

Affected (42)

Products: Wireshark: Wireshark

1 product

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Up to 1.0.5
Wireshark Wireshark	Version 0.10.10
Wireshark Wireshark	Version 0.10.11
Wireshark Wireshark	Version 0.10.12
Wireshark Wireshark	Version 0.10.13
Wireshark Wireshark	Version 0.10.14
Wireshark Wireshark	Version 0.10.1
Wireshark Wireshark	Version 0.10.2
Wireshark Wireshark	Version 0.10.3
Wireshark Wireshark	Version 0.10.4
Wireshark Wireshark	Version 0.10.5
Wireshark Wireshark	Version 0.10.6
Wireshark Wireshark	Version 0.10.7
Wireshark Wireshark	Version 0.10.8
Wireshark Wireshark	Version 0.10.9
Wireshark Wireshark	Version 0.10
Wireshark Wireshark	Version 0.6
Wireshark Wireshark	Version 0.7.9
Wireshark Wireshark	Version 0.8.16
Wireshark Wireshark	Version 0.8.19
Wireshark Wireshark	Version 0.9.10
Wireshark Wireshark	Version 0.9.14
Wireshark Wireshark	Version 0.9.5
Wireshark Wireshark	Version 0.9.7
Wireshark Wireshark	Version 0.9.8
Wireshark Wireshark	Version 0.99.0
Wireshark Wireshark	Version 0.99.1
Wireshark Wireshark	Version 0.99.2
Wireshark Wireshark	Version 0.99.3
Wireshark Wireshark	Version 0.99.4
Wireshark Wireshark	Version 0.99.5
Wireshark Wireshark	Version 0.99.6
Wireshark Wireshark	Version 0.99.6a
Wireshark Wireshark	Version 0.99.7
Wireshark Wireshark	Version 0.99.8
Wireshark Wireshark	Version 0.99
Wireshark Wireshark	Version 1.0.0
Wireshark Wireshark	Version 1.0.1
Wireshark Wireshark	Version 1.0.2
Wireshark Wireshark	Version 1.0.3
Wireshark Wireshark	Version 1.0.4
Wireshark Wireshark	Version 1.0

Related CWEs

Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (44)

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html

Source: cve@mitre.org

http://secunia.com/advisories/34542

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/34778

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/34970

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35133

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35224

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35416

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35464

Source: cve@mitre.org

Vendor Advisory

http://wiki.rpath.com/Advisories:rPSA-2009-0062

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1785

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:088

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-1100.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/502745/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/34291

Source: cve@mitre.org

Exploit

http://www.wireshark.org/security/wnpa-sec-2009-02.html

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49512

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5976

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9526

Source: cve@mitre.org

https://www.exploit-db.com/exploits/8308

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34542

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/34778

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/34970

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35133

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35224

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35416

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35464

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://wiki.rpath.com/Advisories:rPSA-2009-0062

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1785

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:088

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-1100.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/502745/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/34291

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.wireshark.org/security/wnpa-sec-2009-02.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49512

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5976

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9526

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/8308

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.