CVE-2012-4298

no score yetEPSS 6.0%

No CVSS score yet. EPSS 6.0% chance of exploitation in the next 30 days.

Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.

EPSS: 6.0% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2012-08-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sun:sunos
wireshark:wireshark

References

http://anonsvn.wireshark.org/viewvc/trunk/wiretap/vwr.c?r1=44075&r2=44074&pathrev=44075
http://anonsvn.wireshark.org/viewvc?revision=44075&view=revision
http://secunia.com/advisories/50276
http://secunia.com/advisories/51363
http://secunia.com/advisories/54425

Check your stack JSON