Wireshark LDSS Dissector Buffer Overflow Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Wireshark LDSS Dissector Buffer Overflow Vulnerability
# Published : 2010-12-04
# Author : Nephi Johnson
# Previous Title : HP Data Protector Manager A.06.11 MMD NULL Pointer Dereference Denial of Service
# Next Title : TFTPUtil GUI 1.4.5 DoS (Meta)

Source: http://www.securityfocus.com/bid/44987/info

Wireshark is prone to a buffer-overflow vulnerability.

Exploiting this issue may allow attackers to crash the application and deny service to legitimate users. Attackers may also execute arbitrary code in the context of vulnerable users running the application.

This issue affects Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1.

PoC: https://www.exploit-db.com/sploits/15676_pcap.zip