CVE-2010-4538

Published: Jan 7, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding (RLE) compression.

Affected (1)

Products: Wireshark: Wireshark

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.4.2

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (44)

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053042.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053061.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2010/12/31/7

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/01/03/8

Source: secalert@redhat.com

http://osvdb.org/70244

Source: secalert@redhat.com

http://secunia.com/advisories/42767

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42853

Source: secalert@redhat.com

http://secunia.com/advisories/42910

Source: secalert@redhat.com

http://secunia.com/advisories/42914

Source: secalert@redhat.com

http://www.debian.org/security/2011/dsa-2144

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:002

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0013.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/45634

Source: secalert@redhat.com

http://www.securitytracker.com/id?1024930

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0008

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0053

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0069

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0079

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0099

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0110

Source: secalert@redhat.com

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5539

Source: secalert@redhat.com

ExploitPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14937

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053042.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053061.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2010/12/31/7

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/01/03/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/70244

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/42767

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/42853

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/42910

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/42914

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2011/dsa-2144

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:002

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-0013.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/45634

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1024930

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0008

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0053

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0069

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0079

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0099

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0110

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5539

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14937

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.