Denial of Service Vulnerability in Wireshark MPEG DSM-CC Dissector
CVE-2013-3560

Currently unrated

Key Information:

Vendor

Opensuse
Status
Opensuse
Debian Linux
Vendor
CVE Published:
25 May 2013

What is CVE-2013-3560?

The dissect_dsmcc_un_download function in the MPEG DSM-CC dissector of Wireshark versions prior to 1.8.7 is susceptible to a denial of service vulnerability due to an incorrect format string. This flaw permits remote attackers to exploit the application by sending specially crafted packets, leading to application crashes. Users are encouraged to update to the latest versions to mitigate this vulnerability.

References

http://secunia.com/advisories/53425
third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-updates/2013-06/msg000...
vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/54425
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.