Wireshark - 'call_dissector()' Null Pointer Dereference Denial of Service
Author: Wireshark
type: dos
platform: multiple
port:
date_added: 2012-04-19
date_updated: 2016-11-12
verified: 1
codes: CVE-2012-1593;OSVDB-80711
tags:
aliases:
screenshot_url:
application_url:
source: https://www.securityfocus.com/bid/52735/info
Wireshark is prone to a remote denial-of-service vulnerability caused by a NULL-pointer-dereference error.
An attacker can exploit this issue to crash the application, resulting in a denial-of-service condition.
The following Wireshark versions are vulnerable:
1.4.0 through 1.4.11
1.6.0 through 1.6.5
PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/18758.pcap