Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-2299.
PoCs published by Metasploit, Wesley Neelen, j0sm1, including Metasploit module exploits/windows/fileformat/wireshark_mpeg_overflow.
AI-analyzed exploit summary This exploit triggers a stack buffer overflow in Wireshark versions <= 1.8.12/1.10.5 by generating a malicious PCAP file. It uses ROP chains and SEH overwrites to achieve remote code execution on Windows XP SP2/SP3 systems.
Description
Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.
Exploits (2)
This exploit triggers a stack buffer overflow in Wireshark versions <= 1.8.12/1.10.5 by generating a malicious PCAP file. It uses ROP chains and SEH overwrites to achieve remote code execution on Windows XP SP2/SP3 systems.
This Metasploit module exploits a stack buffer overflow in Wireshark <= 1.8.12/1.10.5 via a malicious MPEG file. It uses ROP chains and SEH overwrites to achieve remote code execution on Windows systems.