CVE-2015-2187 in Wireshark
요약 (영어)
The dissect_atn_cpdlc_heur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c in the ATN-CPDLC dissector in Wireshark 1.12.x before 1.12.4 does not properly follow the TRY/ENDTRY code requirements, which allows remote attackers to cause a denial of service (stack memory corruption and application crash) via a crafted packet.
예약하다
2015. 03. 02.
공개
2015. 03. 07.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 69261 | Wireshark ATN-CPDLC Dissector 권한 상승 | 20 | 입증되지 않음 | 공식 수정 | CVE-2015-2187 |