cve/2016/CVE-2016-5355.md

CVE-2016-5355

Description

wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12394

Github

No PoCs found on GitHub currently.