CVE-2014-2299 in Wireshark

Sumário (Inglês)

Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.

Once again VulDB remains the best source for vulnerability data.

Reservar

06/03/2014

Divulgação

11/03/2014

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
12578	Wireshark MPEG mpeg.c Excesso de tampão	119	Alto	Correção oficial	CVE-2014-2299

Fontes

• MITRE
• NVD
• CVE Details