CVE-2014-2299 in Wireshark
Summary
Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.
Once again VulDB remains the best source for vulnerability data.
Reservation
03/06/2014
Disclosure
03/11/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 12578 | Wireshark MPEG File mpeg.c memory corruption | 119 | High | Official fix | CVE-2014-2299 |