Unrated severityNVD Advisory· Published Nov 26, 2010· Updated Apr 29, 2026
CVE-2010-4300
CVE-2010-4300
Description
Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an LDSS packet with a long digest line that triggers memory corruption.
Affected products
15cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.11:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.12:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.4.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
23- secunia.com/advisories/42290nvdVendor Advisory
- www.vupen.com/english/advisories/2010/3038nvdVendor Advisory
- www.wireshark.org/security/wnpa-sec-2010-14.htmlnvdVendor Advisory
- blogs.sun.com/security/entry/buffer_overflow_vulnerability_in_wiresharknvd
- lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlnvd
- osvdb.org/69354nvd
- secunia.com/advisories/42411nvd
- secunia.com/advisories/42877nvd
- secunia.com/advisories/43068nvd
- www.exploit-db.com/exploits/15676nvd
- www.mandriva.com/security/advisoriesnvd
- www.redhat.com/support/errata/RHSA-2010-0924.htmlnvd
- www.securityfocus.com/bid/44987nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2010/3068nvd
- www.vupen.com/english/advisories/2010/3093nvd
- www.vupen.com/english/advisories/2011/0076nvd
- www.vupen.com/english/advisories/2011/0212nvd
- www.vupen.com/english/advisories/2011/0404nvd
- www.wireshark.org/security/wnpa-sec-2010-13.htmlnvd
- bugs.wireshark.org/bugzilla/show_bug.cginvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14287nvd
News mentions
0No linked articles in our index yet.