9.3
CVE-2014-2299
- EPSS 47.42%
- Veröffentlicht 11.03.2014 13:01:10
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginBuffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 47.42% | 0.987 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
http://rhn.redhat.com/errata/RHSA-2014-0341.html
http://rhn.redhat.com/errata/RHSA-2014-0342.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00046.html
http://lists.opensuse.org/opensuse-updates/2014-03/msg00047.html
http://secunia.com/advisories/57480
http://secunia.com/advisories/57489
http://www.debian.org/security/2014/dsa-2871
http://www.securitytracker.com/id/1029907
http://osvdb.org/show/osvdb/104199
http://packetstormsecurity.com/files/126337/Wireshark-1.8.12-1.10.5-wiretap-mpeg.c-Stack-Buffer-Overflow.html
http://www.exploit-db.com/exploits/33069
http://www.securityfocus.com/bid/66066
http://www.wireshark.org/security/wnpa-sec-2014-04.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9843
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f567435ac7140c96a5de56dbce3d5e7659af4d09