CVE-2013-2478 in Wireshark
Summary
The dissect_server_info function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service (application crash) via a malformed packet that (1) triggers an integer overflow or (2) has embedded \0 characters in a string.
Reservation
03/06/2013
Disclosure
03/07/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7921 | Wireshark MS-MMS Dissector numeric error | 189 | Proof-of-Concept | Official fix | CVE-2013-2478 |