CVE-2010-4300: Buffer Overflow
Heap-based buffer overflow in the dissectldsstransfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an LDSS packet with a long digest line that triggers memory corruption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4300?
CVE-2010-4300 is considered a medium severity vulnerability due to its potential for denial of service and arbitrary code execution.
How do I fix CVE-2010-4300?
To fix CVE-2010-4300, update Wireshark to a version that is not affected, such as Wireshark 1.4.2 or later.
What software versions are affected by CVE-2010-4300?
CVE-2010-4300 affects Wireshark versions 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1.
What type of attack does CVE-2010-4300 enable?
CVE-2010-4300 enables remote attackers to conduct a denial of service attack and potentially execute arbitrary code.
In which function does CVE-2010-4300 occur?
CVE-2010-4300 occurs in the dissect_ldss_transfer function within the LDSS dissector of Wireshark.