Wireshark - Misaligned Memory Denial of Service



EKU-ID: 24582 CVE: CVE-2012-2394;OSVDB-82100 OSVDB-ID:
Author: Klaus Heckelmann Published: 2012-05-24 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


source: https://www.securityfocus.com/bid/53653/info

Wireshark is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

Wireshark versions 1.6.0 through 1.6.7 and versions 1.4.0 through 1.4.12 are vulnerable.

PoC:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/18920.pcap