CVE-2015-0563 in Wireshark
Résumé (Anglaise)
epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Réserver
06/01/2015
Divulgation
09/01/2015
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 68624 | Wireshark SMTP Dissector élévation de privilèges | 20 | Non prouvée | Correctif officiel | CVE-2015-0563 |