Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2012-4298

Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.

Related bugs and status

CVE-2012-4298 (Candidate) is related to these bugs:

Bug #1037434: <wireshark-{1.6.10,1.8.2} - multiple vulnerabilities

		In	Importance	Status
1037434	<wireshark-{1.6.10,1.8.2} - multiple vulnerabilities	wireshark (Ubuntu)	Undecided	Fix Released
1037434	<wireshark-{1.6.10,1.8.2} - multiple vulnerabilities	Gentoo Linux	Medium	Fix Released
1037434	<wireshark-{1.6.10,1.8.2} - multiple vulnerabilities	wireshark (Ubuntu Precise)	Undecided	Won't Fix

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://www.wireshark.o...
CONFIRM: https://bugs.wireshark...
SUSE: openSUSE-SU-2012:1067
BID: 55035
CONFIRM: https://blogs.oracle.c...
SECUNIA: 51363
GENTOO: GLSA-201308-05
SECUNIA: 50276
SECUNIA: 54425
CONFIRM: http://anonsvn.wiresha...
CONFIRM: http://anonsvn.wiresha...
OVAL: oval:org.mitre.oval:de...