Candidate: CVE-2010-4538 PublicDate: 2011-01-07 19:00:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4538 Description: Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding (RLE) compression. Ubuntu-Description: Notes: Bugs: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5539 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608990 https://bugs.launchpad.net/ubuntu/+source/wireshark/+bug/730417 Priority: medium Discovered-by: Assigned-to: CVSS: Patches_wireshark: upstream: http://anonsvn.wireshark.org/viewvc?view=rev&revision=35318 upstream_wireshark: released (1.2.11-6, 1.4.4-1) dapper_wireshark: DNE hardy_wireshark: ignored (reached end-of-life) karmic_wireshark: ignored (reached end-of-life) lucid_wireshark: ignored (reached end-of-life) maverick_wireshark: released (1.2.11-6build0.10.10.1) natty_wireshark: not-affected (1.4.4-1) oneiric_wireshark: not-affected (1.4.4-1) precise_wireshark: not-affected (1.4.4-1) quantal_wireshark: not-affected (1.4.4-1) raring_wireshark: not-affected (1.4.4-1) saucy_wireshark: not-affected (1.4.4-1) devel_wireshark: not-affected (1.4.4-1)