CVE-2014-8713 in Wireshark
Summary
Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
11/09/2014
Disclosure
11/22/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68202 | Wireshark NCP Dissector memory corruption | 119 | Unproven | Official fix | CVE-2014-8713 |