CVE-2015-8736

MEDIUM

Wireshark 2.0.x - Denial of Service via MP2T File Parser Stack-Based Buffer Overflow

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-8736. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit demonstrates a stack-based buffer overflow in Wireshark's MP2T dissector, leading to a crash via a malformed file. The PoC includes a crash log and a link to files that trigger the vulnerability.

Description

The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · textdosmultiple

https://www.exploit-db.com/exploits/38997

View Code ZIP pw:eip

This exploit demonstrates a stack-based buffer overflow in Wireshark's MP2T dissector, leading to a crash via a malformed file. The PoC includes a crash log and a link to files that trigger the vulnerability.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: Wireshark (git master at time of disclosure)

No auth needed

Prerequisites: A malformed file to be processed by Wireshark/tshark

MITRE ATT&CK