CVE-2012-4298: Buffer Overflow
Published Aug 16, 2012
·Updated
Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.
Affected Software
3 affected components
Sun SunOS=5.11
Wireshark Wireshark=1.8.0
Wireshark Wireshark=1.8.1
Remediation
Event History
Aug 16, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4298?
CVE-2012-4298 has a high severity rating due to its potential to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2012-4298?
To fix CVE-2012-4298, update Wireshark to version 1.8.2 or later.
3
What versions of Wireshark are affected by CVE-2012-4298?
CVE-2012-4298 affects Wireshark versions 1.8.0 and 1.8.1.
4
What kind of attack can exploit CVE-2012-4298?
CVE-2012-4298 can be exploited by remote attackers using a crafted packet-trace file.
5
Is CVE-2012-4298 related to buffer overflow vulnerabilities?
Yes, CVE-2012-4298 is specifically related to a buffer overflow caused by an integer signedness error.