10

CVE-2010-2995

The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, different vulnerabilities than CVE-2010-2287.

Data is provided by the National Vulnerability Database (NVD)
WiresharkWireshark Version0.10.8
WiresharkWireshark Version0.10.9
WiresharkWireshark Version0.10.10
WiresharkWireshark Version0.10.11
WiresharkWireshark Version0.10.12
WiresharkWireshark Version0.10.13
WiresharkWireshark Version0.10.14
WiresharkWireshark Version1.0.0
WiresharkWireshark Version1.0.1
WiresharkWireshark Version1.0.2
WiresharkWireshark Version1.0.3
WiresharkWireshark Version1.0.4
WiresharkWireshark Version1.0.5
WiresharkWireshark Version1.0.6
WiresharkWireshark Version1.0.7
WiresharkWireshark Version1.0.8
WiresharkWireshark Version1.0.9
WiresharkWireshark Version1.0.10
WiresharkWireshark Version1.0.11
WiresharkWireshark Version1.0.12
WiresharkWireshark Version1.0.13
WiresharkWireshark Version1.0.14
WiresharkWireshark Version1.2
WiresharkWireshark Version1.2.0
WiresharkWireshark Version1.2.1
WiresharkWireshark Version1.2.2
WiresharkWireshark Version1.2.3
WiresharkWireshark Version1.2.4
WiresharkWireshark Version1.2.5
WiresharkWireshark Version1.2.6
WiresharkWireshark Version1.2.7
WiresharkWireshark Version1.2.8
WiresharkWireshark Version1.2.9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 6.64% 0.902
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C