CVE-2011-1591
Wireshark 1.4.x < 1.4.5 - Stack-Based Buffer Overflow in DECT Dissector
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2011-1591.
PoCs published by Metasploit, sickness, ipv, including Metasploit module exploits/windows/misc/wireshark_packet_dect.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Wireshark <= 1.4.4 by sending a malicious packet. It uses ROP gadgets to bypass DEP and ASLR, achieving remote code execution.
Description
Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.
Exploits (6)
This Metasploit module exploits a stack buffer overflow in Wireshark <= 1.4.4 by sending a malicious packet. It uses ROP gadgets to bypass DEP and ASLR, achieving remote code execution.
This exploit leverages a stack buffer overflow in Wireshark <= 1.4.4 by crafting a malicious .pcap file. It bypasses DEP and ASLR using ROP gadgets to achieve arbitrary code execution on Windows systems.
This exploit targets a buffer overflow vulnerability in Wireshark versions 1.4.1-1.4.4 by crafting a malicious .pcap file. The payload includes shellcode and NOP sleds to achieve remote code execution on systems with DEP disabled.
This exploit leverages a stack-based buffer overflow in Wireshark's DECT dissector (CVE-2011-1591) to achieve remote code execution via ROP chains and shellcode execution, bypassing NX/ASLR protections.
This Metasploit module exploits a stack buffer overflow in Wireshark <= 1.4.4 by sending a malicious packet. It uses ROP gadgets to bypass DEP and ASLR, achieving remote code execution.
This Metasploit module exploits a stack buffer overflow in Wireshark <= 1.4.4 by crafting a malicious .pcap file. It uses ROP gadgets to bypass DEP and ASLR, achieving arbitrary code execution when the file is opened.