CVE-2012-1593 Null dereference in n/a

Low 3.3 Published 11 Apr 2012 Updated 6 Aug 2024

Remote attackers can crash Wireshark via malformed ANSI A packets, causing a denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2012-1593?

CVE-2012-1593 is a low-severity vulnerability in Wireshark Wireshark, published on 11 Apr 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed packet.

Which versions are affected by CVE-2012-1593?

It affects 1 product.

Products include Wireshark Wireshark.

How do I fix CVE-2012-1593?

Upgrade to a fixed version.

Is CVE-2012-1593 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-1593 exists.

Public exploit code: 1 Exploit-DB entry.

All Wireshark Wireshark vulnerabilities

Sources

Also known as DEBIAN-CVE-2012-1593, GHSA-7g8h-gv59-45hj.