CVE-2009-1210
NoneCVSS
—
EPSS
15.2%
Published
Apr 1, 2009
CISA due date
—
The record
Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | wireshark | 0 | 1.0.7-1 |
| Debian:11 | wireshark | 0 | 1.0.7-1 |
| Debian:12 | wireshark | 0 | 1.0.7-1 |
| Debian:13 | wireshark | 0 | 1.0.7-1 |
| Debian:5.0 | wireshark | 0 | 1.0.2-3+lenny5 |
| Red Hat:enterprise_linux:3::as | wireshark | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:3::as | wireshark-debuginfo | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:3::as | wireshark-gnome | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:3::desktop | wireshark | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:3::desktop | wireshark-debuginfo | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:3::desktop | wireshark-gnome | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:3::es | wireshark | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:3::es | wireshark-debuginfo | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:3::es | wireshark-gnome | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:3::ws | wireshark | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:3::ws | wireshark-debuginfo | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:3::ws | wireshark-gnome | 0 | 0:1.0.8-EL3.1 |
| Red Hat:enterprise_linux:4::as | wireshark | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | wireshark-debuginfo | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:4::as | wireshark-gnome | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | wireshark | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | wireshark-debuginfo | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | wireshark-gnome | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | wireshark | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | wireshark-debuginfo | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:4::es | wireshark-gnome | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | wireshark | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | wireshark-debuginfo | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | wireshark-gnome | 0 | 0:1.0.8-1.el4_8.1 |
| Red Hat:enterprise_linux:5::client | wireshark | 0 | 0:1.0.8-1.el5_3.1 |
| Red Hat:enterprise_linux:5::client | wireshark-debuginfo | 0 | 0:1.0.8-1.el5_3.1 |
| Red Hat:enterprise_linux:5::client | wireshark-gnome | 0 | 0:1.0.8-1.el5_3.1 |
| Red Hat:enterprise_linux:5::client_workstation | wireshark | 0 | 0:1.0.8-1.el5_3.1 |
| Red Hat:enterprise_linux:5::client_workstation | wireshark-debuginfo | 0 | 0:1.0.8-1.el5_3.1 |
| Red Hat:enterprise_linux:5::client_workstation | wireshark-gnome | 0 | 0:1.0.8-1.el5_3.1 |
| Red Hat:enterprise_linux:5::server | wireshark | 0 | 0:1.0.8-1.el5_3.1 |
| Red Hat:enterprise_linux:5::server | wireshark-debuginfo | 0 | 0:1.0.8-1.el5_3.1 |
| Red Hat:enterprise_linux:5::server | wireshark-gnome | 0 | 0:1.0.8-1.el5_3.1 |
| openSUSE:Tumbleweed | wireshark | 0 | 2.2.2-1.1 |
Related vulnerabilities
- CVE-2023-6175 NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows… Also affects wireshark
- CVE-2017-9353 In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. Also affects wireshark
- CVE-2012-1593 epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12… Also affects wireshark
- CVE-2011-3360 Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before… Also affects wireshark
- CVE-2011-1140 Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and… Also affects wireshark
- CVE-2024-11596 ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of… Also affects wireshark
- CVE-2024-9781 AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows… Also affects wireshark
- CVE-2024-9780 ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or… Also affects wireshark