Vulnerability Details : CVE-2012-0066
Potential exploit
Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a (1) Accellent 5Views (aka .5vw) file, (2) I4B trace file, or (3) NETMON 2 capture file.
Vulnerability category: Input validationDenial of service
Products affected by CVE-2012-0066
- cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.9:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.6.4:*:*:*:*:*:*:*
Threat overview for CVE-2012-0066
Top countries where our scanners detected CVE-2012-0066
Top open port discovered on systems with this issue
53
IPs affected by CVE-2012-0066 17,069
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2012-0066!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2012-0066
0.53%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 77 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-0066
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2012-0066
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-0066
-
http://www.wireshark.org/security/wnpa-sec-2012-01.html
Wireshark · wnpa-sec-2012-01 · Multiple Wireshark file parser vulnerabilitiesVendor Advisory
-
http://anonsvn.wireshark.org/viewvc?view=revision&revision=40165
code.wireshark Code Review - wireshark.git/treePatch
-
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6666
6666 – 5views capture file that crashes wiresharkExploit
-
http://www.openwall.com/lists/oss-security/2012/01/20/4
oss-security - Re: CVE request: Wireshark multiple vulnerabilitiesPatch
-
http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml
Wireshark: Multiple vulnerabilities (GLSA 201308-05) — Gentoo security
-
http://www.openwall.com/lists/oss-security/2012/01/11/7
oss-security - Re: CVE request: Wireshark multiple vulnerabilities
-
http://anonsvn.wireshark.org/viewvc?view=revision&revision=40166
code.wireshark Code Review - wireshark.git/treePatch
-
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6669
6669 – netmon2 capture file that crashes wiresharkExploit
-
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6667
6667 – i4b capture file that crashes wiresharkExploit
-
http://rhn.redhat.com/errata/RHSA-2013-0125.html
RHSA-2013:0125 - Security Advisory - Red Hat Customer Portal
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15111
Repository / Oval Repository
Jump to