3.3

CVE-2012-4285

Exploit

The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message.

Data is provided by the National Vulnerability Database (NVD)
OpensuseOpensuse Version11.4
OpensuseOpensuse Version12.1
RedhatEnterprise Linux Version5
SunSunos Version5.11
WiresharkWireshark Version1.8.0
WiresharkWireshark Version1.8.1
WiresharkWireshark Version1.6.0
WiresharkWireshark Version1.6.1
WiresharkWireshark Version1.6.2
WiresharkWireshark Version1.6.3
WiresharkWireshark Version1.6.4
WiresharkWireshark Version1.6.5
WiresharkWireshark Version1.6.6
WiresharkWireshark Version1.6.7
WiresharkWireshark Version1.6.8
WiresharkWireshark Version1.6.9
WiresharkWireshark Version1.4.0
WiresharkWireshark Version1.4.1
WiresharkWireshark Version1.4.2
WiresharkWireshark Version1.4.3
WiresharkWireshark Version1.4.4
WiresharkWireshark Version1.4.5
WiresharkWireshark Version1.4.6
WiresharkWireshark Version1.4.7
WiresharkWireshark Version1.4.8
WiresharkWireshark Version1.4.9
WiresharkWireshark Version1.4.10
WiresharkWireshark Version1.4.11
WiresharkWireshark Version1.4.12
WiresharkWireshark Version1.4.13
WiresharkWireshark Version1.4.14
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.78% 0.729
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:N/A:P