Executive Summary
This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
| Informations | |||
|---|---|---|---|
| Name | CVE-2010-2995 | First vendor Publication | 2010-08-13 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 10 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, different vulnerabilities than CVE-2010-2287. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2995 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-189 | Numeric Errors (CWE/SANS Top 25) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:12049 | |||
| Oval ID: | oval:org.mitre.oval:def:12049 | ||
| Title: | Vulnerability in SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark | ||
| Description: | The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, different vulnerabilities than CVE-2010-2287. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2010-2995 | Version: | 9 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 8 Microsoft Windows Server 2012 | Product(s): | Wireshark |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:12408 | |||
| Oval ID: | oval:org.mitre.oval:def:12408 | ||
| Title: | DSA-2101-1 wireshark -- several | ||
| Description: | Several implementation errors in the dissector of the Wireshark network traffic analyzer for the ASN.1 BER protocol and in the SigComp Universal Decompressor Virtual Machine may lead to the execution of arbitrary code. For the stable distribution, these problems have been fixed in version 1.0.2-3+lenny10. For the unstable distribution, these problems have been fixed in version 1.2.10-1. We recommend that you upgrade your wireshark packages. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-2101-1 CVE-2010-2994 CVE-2010-2995 | Version: | 5 |
| Platform(s): | Debian GNU/Linux 5.0 | Product(s): | wireshark |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:22021 | |||
| Oval ID: | oval:org.mitre.oval:def:22021 | ||
| Title: | RHSA-2010:0625: wireshark security update (Moderate) | ||
| Description: | The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, different vulnerabilities than CVE-2010-2287. | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2010:0625-01 CESA-2010:0625 CVE-2010-1455 CVE-2010-2283 CVE-2010-2284 CVE-2010-2286 CVE-2010-2287 CVE-2010-2995 | Version: | 81 |
| Platform(s): | Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 5 CentOS Linux 5 | Product(s): | wireshark |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:23018 | |||
| Oval ID: | oval:org.mitre.oval:def:23018 | ||
| Title: | ELSA-2010:0625: wireshark security update (Moderate) | ||
| Description: | The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, different vulnerabilities than CVE-2010-2287. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2010:0625-01 CVE-2010-1455 CVE-2010-2283 CVE-2010-2284 CVE-2010-2286 CVE-2010-2287 CVE-2010-2995 | Version: | 31 |
| Platform(s): | Oracle Linux 3 Oracle Linux 4 Oracle Linux 5 | Product(s): | wireshark |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-02-12 | Name : Gentoo Security Advisory GLSA 201110-02 (wireshark) File : nvt/glsa_201110_02.nasl |
| 2010-10-10 | Name : Debian Security Advisory DSA 2101-1 (wireshark) File : nvt/deb_2101_1.nasl |
| 2010-09-07 | Name : Fedora Update for wireshark FEDORA-2010-13416 File : nvt/gb_fedora_2010_13416_wireshark_fc13.nasl |
| 2010-09-07 | Name : Fedora Update for wireshark FEDORA-2010-13427 File : nvt/gb_fedora_2010_13427_wireshark_fc12.nasl |
| 2010-08-30 | Name : CentOS Update for wireshark CESA-2010:0625 centos4 i386 File : nvt/gb_CESA-2010_0625_wireshark_centos4_i386.nasl |
| 2010-08-19 | Name : Wireshark Multiple Vulnerabilities (win) File : nvt/gb_wireshark_mult_vuln_win.nasl |
| 2010-08-13 | Name : RedHat Update for wireshark RHSA-2010:0625-01 File : nvt/gb_RHSA-2010_0625-01_wireshark.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 67191 | Wireshark SigComp Universal Decompressor Virtual Machine sigcomp-udvm.c Off-b... |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2014-06-13 | Name : The remote openSUSE host is missing a security update. File : suse_11_3_wireshark-101222.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0625.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100811_wireshark_on_SL3_x.nasl - Type : ACT_GATHER_INFO |
| 2011-10-10 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-02.nasl - Type : ACT_GATHER_INFO |
| 2011-05-05 | Name : The remote openSUSE host is missing a security update. File : suse_11_1_wireshark-101222.nasl - Type : ACT_GATHER_INFO |
| 2011-05-05 | Name : The remote openSUSE host is missing a security update. File : suse_11_2_wireshark-101222.nasl - Type : ACT_GATHER_INFO |
| 2011-04-07 | Name : The remote SuSE 11 host is missing a security update. File : suse_11_wireshark-110331.nasl - Type : ACT_GATHER_INFO |
| 2010-09-03 | Name : The remote Fedora host is missing a security update. File : fedora_2010-13416.nasl - Type : ACT_GATHER_INFO |
| 2010-09-03 | Name : The remote Fedora host is missing a security update. File : fedora_2010-13427.nasl - Type : ACT_GATHER_INFO |
| 2010-09-01 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2101.nasl - Type : ACT_GATHER_INFO |
| 2010-08-24 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0625.nasl - Type : ACT_GATHER_INFO |
| 2010-08-12 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0625.nasl - Type : ACT_GATHER_INFO |
| 2010-08-02 | Name : The remote host has an application that is affected by multiple vulnerabilities. File : wireshark_1_2_10.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:07:50 |
|
| 2024-11-28 12:22:37 |
|
| 2021-05-04 12:12:04 |
|
| 2021-04-22 01:12:29 |
|
| 2020-05-23 00:26:16 |
|
| 2017-09-19 09:23:53 |
|
| 2016-04-26 20:01:14 |
|
| 2015-12-24 13:25:51 |
|
| 2015-12-05 13:26:25 |
|
| 2014-06-14 13:29:06 |
|
| 2014-02-17 10:56:52 |
|
| 2013-05-10 23:30:25 |
|
