CVE-2011-1591

Published: Apr 29, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.

Affected (5)

Products: Wireshark: Wireshark

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	Version 1.4.0
Wireshark Wireshark	Version 1.4.1
Wireshark Wireshark	Version 1.4.2
Wireshark Wireshark	Version 1.4.3
Wireshark Wireshark	Version 1.4.4

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (40)

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058900.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058983.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058993.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/04/18/2

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/04/18/8

Source: secalert@redhat.com

http://secunia.com/advisories/44172

Source: secalert@redhat.com

http://secunia.com/advisories/44374

Source: secalert@redhat.com

http://securitytracker.com/id?1025389

Source: secalert@redhat.com

http://www.exploit-db.com/exploits/17185

Source: secalert@redhat.com

Exploit

http://www.exploit-db.com/exploits/17195

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/243670

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2011:083

Source: secalert@redhat.com

http://www.osvdb.org/71848

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/1022

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/1106

Source: secalert@redhat.com

http://www.wireshark.org/security/wnpa-sec-2011-06.html

Source: secalert@redhat.com

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5836

Source: secalert@redhat.com

Exploit

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5838

Source: secalert@redhat.com

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/66834

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15000

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058900.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058983.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058993.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/04/18/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/04/18/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44172

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44374

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1025389

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.exploit-db.com/exploits/17185

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.exploit-db.com/exploits/17195

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/243670

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2011:083

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/71848

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/1022

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/1106

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.wireshark.org/security/wnpa-sec-2011-06.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5836

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5838

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/66834

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15000

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.