CVE-2010-4538

Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding (RLE) compression.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

28.98% chance of exploitation in the next 30 days, 98th percentile

Published

2011-01-07

Updated

2024-08-07

Proof-of-concept exploits (1)

• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5539

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15898

References

• CVE Record
• NVD entry

Related

• CVE-2010-4536
• CVE-2010-4539
• CVE-2010-4524
• CVE-2010-4540
• CVE-2010-4523
• CVE-2010-4542