epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers incorrect memory allocation.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-06-30 03:15
Updated : 2017-09-18 18:34
NVD link : CVE-2012-2393
Mitre link : CVE-2012-2393
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
wireshark
- wireshark