CVE-2012-4288: Integer Overflow
Integer overflow in the dissectxtpecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large value for a span length.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4288?
The severity of CVE-2012-4288 is classified as high due to its potential to cause denial of service.
How do I fix CVE-2012-4288?
To fix CVE-2012-4288, upgrade to Wireshark version 1.4.15, 1.6.10, or 1.8.2 or later.
Which versions of Wireshark are affected by CVE-2012-4288?
Versions of Wireshark before 1.4.15, 1.6.10, and 1.8.2 are affected by CVE-2012-4288.
What type of attack is possible with CVE-2012-4288?
CVE-2012-4288 allows remote attackers to perform denial of service attacks by crashing the application.
Can CVE-2012-4288 impact other software besides Wireshark?
CVE-2012-4288 primarily impacts Wireshark, but it may affect systems that rely on vulnerable versions.