CVE-2010-0304
Wireshark 0.9.15-1.0.10 and 1.2.0-1.2.5 - Denial of Service via Malformed LWRES Packet
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2010-0304.
PoCs published by Metasploit, babi, babi, jduck, redsand, including Metasploit module exploits/multi/misc/wireshark_lwres_getaddrbyname.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in Wireshark's LWRES dissector (CVE-2010-0304), allowing remote code execution via a malformed UDP packet. It includes multiple targets for different platforms and versions, leveraging techniques like SEH bypass and GOT overwrites.
Description
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.
Exploits (5)
This exploit targets a stack-based buffer overflow in Wireshark's LWRES dissector (CVE-2010-0304), allowing remote code execution via a malformed UDP packet. It includes multiple targets for different platforms and versions, leveraging techniques like SEH bypass and GOT overwrites.
This Metasploit module exploits a stack-based buffer overflow in Wireshark's LWRES dissector (CVE-2010-0304) via a malformed UDP packet. It includes multiple targets for different platforms and versions, leveraging techniques like SEH bypass and GOT overwrites.
This exploit targets a stack-based buffer overflow in Wireshark 1.2.5's LWRES getaddrbyname function via a maliciously crafted UDP packet. It demonstrates control over EIP on Debian 5.0.3 by sending a payload with a length of 380 bytes.
This Metasploit module exploits a stack-based buffer overflow in Wireshark's LWRES dissector (CVE-2010-0304) via a malformed UDP packet. It includes multiple targets for different platforms and employs techniques like SEH bypass and GOT overwrites.
This Metasploit module exploits a stack-based buffer overflow in Wireshark's LWRES dissector (CVE-2010-0304) via a malformed UDP packet. It includes multiple targets for different platforms and uses techniques like SEH bypass for Windows and GOT overwrites for Linux.