CVE-2014-6432 – wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)

https://notcve.org/view.php?id=CVE-2014-6432

20 Sep 2014 — The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not prevent data overwrites during copy operations, which allows remote attackers to cause a denial of service (application crash) via a crafted file. La función SnifferDecompress en wiretap/ngsniffer.c en el analizador de ficheros DOS Sniffer en Wireshark 1.10.x anterior a 1.10.10 y 1.12.x anterior a 1.12.1 no previene la sobreescritura de datos durante opera... • http://linux.oracle.com/errata/ELSA-2014-1676 • CWE-399: Resource Management Errors •