CVE-2007-6113 Integer overflow in n/a
Remote attackers can cause a denial of service in Wireshark via a malformed DNP3 packet due to an integer signedness error.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-6113?
CVE-2007-6113 is a medium-severity vulnerability in Wireshark Wireshark, published on 23 Nov 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service (long loop) via a malformed DNP3 packet.
Weakness: CWE-189
Which versions are affected by CVE-2007-6113?
It affects 1 product.
Products include Wireshark Wireshark.
How do I fix CVE-2007-6113?
Upgrade to a fixed version.
Is CVE-2007-6113 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-6113 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Wireshark Wireshark
Sources
Also known as CVE-2007-4721, CVE-2007-6444, DEBIAN-CVE-2007-6113, GHSA-7pf5-64wg-qq2g.