CVE-2009-1210

Wireshark < 1.0.5 - Format String Vulnerability

Title source: rule

Description

Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED

by THCX Labs · cdosmultiple

https://www.exploit-db.com/exploits/8308

View Code ZIP pw:eip

References (22)

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html

[Vendor Advisory] http://secunia.com/advisories/34542

[Vendor Advisory] http://secunia.com/advisories/34778

[Vendor Advisory] http://secunia.com/advisories/34970

[Vendor Advisory] http://secunia.com/advisories/35133

[Vendor Advisory] http://secunia.com/advisories/35224

[Vendor Advisory] http://secunia.com/advisories/35416

[Vendor Advisory] http://secunia.com/advisories/35464

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2009:088

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2009-1100.html

[Exploit] http://www.securityfocus.com/bid/34291

[Vendor Advisory] http://www.wireshark.org/security/wnpa-sec-2009-02.html

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/49512

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html

[Third Party Advisory] http://wiki.rpath.com/Advisories:rPSA-2009-0062

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/502745/100/0/threaded

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/8308

[Third Party Advisory] http://www.debian.org/security/2009/dsa-1785

... and 2 more

Scores

EPSS 0.3447

EPSS Percentile 97.0%

Details

CWE

CWE-134

Status published

Products (42)

wireshark/wireshark 0.6

wireshark/wireshark 0.7.9

wireshark/wireshark 0.8.16

wireshark/wireshark 0.8.19

wireshark/wireshark 0.9.5

wireshark/wireshark 0.9.7

wireshark/wireshark 0.9.8

wireshark/wireshark 0.9.10

wireshark/wireshark 0.9.14

wireshark/wireshark 0.10

... and 32 more

Published Apr 01, 2009

Tracked Since Feb 18, 2026