CVE-2012-4298

Publication date 16 August 2012

Last updated 24 July 2024

Ubuntu priority

Description

Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
wireshark	12.04 LTS precise	Not affected
	11.10 oneiric	Not affected
	11.04 natty	Not affected
	10.04 LTS lucid	Not affected
	8.04 LTS hardy	Not affected

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7533
http://www.wireshark.org/security/wnpa-sec-2012-25.html
http://anonsvn.wireshark.org/viewvc?revision=44075&view=revision
http://anonsvn.wireshark.org/viewvc/trunk/wiretap/vwr.c?r1=44075&r2=44074&pathrev=44075
https://www.cve.org/CVERecord?id=CVE-2012-4298