CVE-2012-4285
wireshark: crash due to zero division in DCP ETSI dissector (wnpa-sec-2012-13)
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message.
La función dissect_pft en epan/dissectors/packet-dcp-etsi.c en el (DCP ETSI dissector) en Wireshark v1.4.x anterior a v1.4.15, v1.6.x anterior a v1.6.10, y v1.8.x anterior a v1.8.2 permite a atacantes remotos causar una denegación de servicio (error de división por cero y caída de la aplicación) a través de un mensaje con longitud cero.
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. A heap-based buffer overflow flaw was found in the way Wireshark handled Endace ERF capture files. If Wireshark opened a specially-crafted ERF capture file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or opened a malicious dump file.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-08-14 CVE Reserved
- 2012-08-16 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2025-04-02 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-189: Numeric Errors
CAPEC
References (16)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/50276 | Third Party Advisory | |
| http://secunia.com/advisories/51363 | Third Party Advisory | |
| http://secunia.com/advisories/54425 | Third Party Advisory | |
| http://www.securityfocus.com/bid/55035 | Vdb Entry | |
| https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 | X_refsource_confirm | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15712 | Signature |
| URL | Date | SRC |
|---|---|---|
| https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7566 | 2024-08-06 |
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html | 2018-10-30 | |
| http://rhn.redhat.com/errata/RHSA-2013-0125.html | 2018-10-30 | |
| http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml | 2018-10-30 | |
| http://www.wireshark.org/security/wnpa-sec-2012-13.html | 2018-10-30 | |
| https://hermes.opensuse.org/messages/15514562 | 2018-10-30 | |
| https://access.redhat.com/security/cve/CVE-2012-4285 | 2013-11-20 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=848541 | 2013-11-20 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 11.4 Search vendor "Opensuse" for product "Opensuse" and version "11.4" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 12.1 Search vendor "Opensuse" for product "Opensuse" and version "12.1" | - |
Affected
| ||||||
| Redhat Search vendor "Redhat" | Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux" | 5 Search vendor "Redhat" for product "Enterprise Linux" and version "5" | - |
Affected
| ||||||
| Sun Search vendor "Sun" | Sunos Search vendor "Sun" for product "Sunos" | 5.11 Search vendor "Sun" for product "Sunos" and version "5.11" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.0 Search vendor "Wireshark" for product "Wireshark" and version "1.8.0" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.8.1 Search vendor "Wireshark" for product "Wireshark" and version "1.8.1" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.0 Search vendor "Wireshark" for product "Wireshark" and version "1.6.0" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.1 Search vendor "Wireshark" for product "Wireshark" and version "1.6.1" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.2 Search vendor "Wireshark" for product "Wireshark" and version "1.6.2" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.3 Search vendor "Wireshark" for product "Wireshark" and version "1.6.3" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.4 Search vendor "Wireshark" for product "Wireshark" and version "1.6.4" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.5 Search vendor "Wireshark" for product "Wireshark" and version "1.6.5" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.6 Search vendor "Wireshark" for product "Wireshark" and version "1.6.6" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.7 Search vendor "Wireshark" for product "Wireshark" and version "1.6.7" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.8 Search vendor "Wireshark" for product "Wireshark" and version "1.6.8" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.6.9 Search vendor "Wireshark" for product "Wireshark" and version "1.6.9" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.0 Search vendor "Wireshark" for product "Wireshark" and version "1.4.0" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.1 Search vendor "Wireshark" for product "Wireshark" and version "1.4.1" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.2 Search vendor "Wireshark" for product "Wireshark" and version "1.4.2" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.3 Search vendor "Wireshark" for product "Wireshark" and version "1.4.3" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.4 Search vendor "Wireshark" for product "Wireshark" and version "1.4.4" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.5 Search vendor "Wireshark" for product "Wireshark" and version "1.4.5" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.6 Search vendor "Wireshark" for product "Wireshark" and version "1.4.6" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.7 Search vendor "Wireshark" for product "Wireshark" and version "1.4.7" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.8 Search vendor "Wireshark" for product "Wireshark" and version "1.4.8" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.9 Search vendor "Wireshark" for product "Wireshark" and version "1.4.9" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.10 Search vendor "Wireshark" for product "Wireshark" and version "1.4.10" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.11 Search vendor "Wireshark" for product "Wireshark" and version "1.4.11" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.12 Search vendor "Wireshark" for product "Wireshark" and version "1.4.12" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.13 Search vendor "Wireshark" for product "Wireshark" and version "1.4.13" | - |
Affected
| ||||||
| Wireshark Search vendor "Wireshark" | Wireshark Search vendor "Wireshark" for product "Wireshark" | 1.4.14 Search vendor "Wireshark" for product "Wireshark" and version "1.4.14" | - |
Affected
| ||||||