CVE-2009-1210 : Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark

Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information.

Published 2009-04-01 10:30:00

Updated 2018-10-10 19:35:09

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2009-1210

Wireshark » Wireshark
Versions up to, including, (<=) 1.0.5
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.11
cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.12
cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.13
cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.14
cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.99
cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.99.0
cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.4
cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.99.1
cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10
cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.9.7
cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.9.8
cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.9.5
cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.9.10
cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.9.14
cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.99.2
cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.7.9
cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.8.16
cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.99.3
cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.99.4
cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.5
cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.2
cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.3
cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.6
cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.7
cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.8
cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.9
cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.99.5
cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.1
cpe:2.3:a:wireshark:wireshark:0.10.1:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.10.10
cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.99.6
cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.6
cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.8.19
cpe:2.3:a:wireshark:wireshark:0.8.19:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.99.7
cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.99.8
cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 1.0
cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 1.0.0
cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 0.99.6a
cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 1.0.1
cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 1.0.2
cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 1.0.3
cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*
Matching versions
Wireshark » Wireshark » Version: 1.0.4
cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2009-1210

EPSS FAQ

93.90%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-1210

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2009-1210

CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-1210

http://www.wireshark.org/security/wnpa-sec-2009-02.html

Wireshark • wnpa-sec-2009-02 Multiple problems in Wireshark
Vendor Advisory

CVEs referencing this url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9526

404 Not Found
http://www.mandriva.com/security/advisories?name=MDVSA-2009:088

Mandriva

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html

[security-announce] SUSE Security Summary Report: SUSE-SR:2009:011 - openSUSE Security Announce - openSUSE Mailing Lists

CVEs referencing this url
http://wiki.rpath.com/Advisories:rPSA-2009-0062

CVEs referencing this url
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html

[SECURITY] Fedora 10 Update: wireshark-1.0.7-1.fc10

CVEs referencing this url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5976

404 Not Found
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html

[SECURITY] Fedora 9 Update: wireshark-1.0.8-1.fc9

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/49512

Wireshark PN-DCP format string CVE-2009-1210 Vulnerability Report
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html

[SECURITY] Fedora 10 Update: wireshark-1.0.8-1.fc10

CVEs referencing this url
http://www.securityfocus.com/bid/34291

Exploit
http://www.debian.org/security/2009/dsa-1785

[SECURITY] [DSA 1785-1] New wireshark packages fix several vulnerabilities

CVEs referencing this url
http://www.securityfocus.com/archive/1/502745/100/0/threaded

CVEs referencing this url
http://www.redhat.com/support/errata/RHSA-2009-1100.html

Support

CVEs referencing this url
https://www.exploit-db.com/exploits/8308

Wireshark 1.0.6 - PN-DCP Format String (PoC) - Multiple dos Exploit

Jump to

Vulnerability Details : CVE-2009-1210

Products affected by CVE-2009-1210

Exploit prediction scoring system (EPSS) score for CVE-2009-1210

CVSS scores for CVE-2009-1210

CWE ids for CVE-2009-1210

References for CVE-2009-1210