Wireshark CVE-2013-4082 Heap Buffer Overflow Vulnerability

Bugtraq ID:	60506
Class:	Boundary Condition Error
CVE:	CVE-2013-4082
Remote:	Yes
Local:	No
Published:	Jun 10 2013 12:00AM
Updated:	Apr 13 2015 09:30PM
Credit:	Sachin Shinde
Vulnerable:	Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Wireshark CVE-2013-4082 Heap Buffer Overflow Vulnerability

Wireshark is prone to a heap-based buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions.

Wireshark versions 1.8.0 through 1.8.7 are vulnerable.

Note: This issue was previously discussed in BID 60448 (Wireshark Multiple Buffer Overflow and Denial of Service), but has been moved to its own record for better documentation.

Wireshark CVE-2013-4082 Heap Buffer Overflow Vulnerability

A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.

Wireshark CVE-2013-4082 Heap Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Wireshark CVE-2013-4082 Heap Buffer Overflow Vulnerability

References:

• Wireshark Homepage (Wireshark)