CVE-2009-1210

Опубликовано: 01 апр. 2009

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Версия до 1.0.5 (включая)

cpe:2.3:a:wireshark:wireshark:0.6:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.7.9:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.8.16:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.8.19:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.9.5:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.9.7:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.9.8:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.9.10:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.9.14:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.1:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.2:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.3:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.4:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.5:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.6:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.7:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.8:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.9:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.10:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.11:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.12:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.13:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.10.14:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.0:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.1:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.34474

Средний

10 Critical

CVSS2

Дефекты

CWE-134

Связанные уязвимости

CVE-2009-1210

ubuntu

около 16 лет назад

CVE-2009-1210

redhat

около 16 лет назад

CVE-2009-1210

debian

около 16 лет назад

Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in ...

GHSA-mgcw-89jj-vw5f

github

около 3 лет назад

ELSA-2009-1100

oracle-oval

около 16 лет назад

ELSA-2009-1100: wireshark security update (MODERATE)

EPSS

Процентиль: 97%

0.34474

Средний

10 Critical

CVSS2

Дефекты

CWE-134