CVE-2012-1596

Priority
Negligible
Description
The mp2t_process_fragmented_payload function in
epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x
before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a
denial of service (application crash) via a packet containing an invalid
pointer value that triggers an incorrect memory-allocation attempt.
References
Bugs
Notes
tyhicks> Versions affected: 1.4.0 to 1.4.11, 1.6.0 to 1.6.5
Package
Upstream:released (1.4.12, 1.6.6)
Ubuntu 8.04 LTS (Hardy Heron):not-affected
Ubuntu 10.04 LTS (Lucid Lynx):not-affected
Ubuntu 11.10 (Oneiric Ocelot):ignored (reached end-of-life)
Ubuntu 12.04 LTS (Precise Pangolin):not-affected (1.6.6-1)
Ubuntu 12.10 (Quantal Quetzal):not-affected (1.6.6-1)
Ubuntu 13.04 (Raring Ringtail):not-affected (1.6.6-1)
Ubuntu 13.10 (Saucy Salamander):not-affected (1.6.6-1)
Patches:
Upstream:http://anonsvn.wireshark.org/viewvc?view=revision&revision=40978 (maybe)
More Information

Valid XHTML 1.0 Strict

Updated: 2013-05-09 15:18:07 UTC (commit 6824)