CVE-2009-1210

Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information.

• CWE-134

• http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
• http://secunia.com/advisories/34542Vendor Advisory
• http://secunia.com/advisories/34778Vendor Advisory
• http://secunia.com/advisories/34970Vendor Advisory
• http://secunia.com/advisories/35133Vendor Advisory
• http://secunia.com/advisories/35224Vendor Advisory
• http://secunia.com/advisories/35416Vendor Advisory
• http://secunia.com/advisories/35464Vendor Advisory
• http://wiki.rpath.com/Advisories:rPSA-2009-0062
• http://www.debian.org/security/2009/dsa-1785
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:088
• http://www.redhat.com/support/errata/RHSA-2009-1100.html
• http://www.securityfocus.com/archive/1/502745/100/0/threaded
• http://www.securityfocus.com/bid/34291Exploit
• http://www.wireshark.org/security/wnpa-sec-2009-02.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49512
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5976
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9526
• https://www.exploit-db.com/exploits/8308
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html
• http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
• http://secunia.com/advisories/34542Vendor Advisory
• http://secunia.com/advisories/34778Vendor Advisory
• http://secunia.com/advisories/34970Vendor Advisory
• http://secunia.com/advisories/35133Vendor Advisory
• http://secunia.com/advisories/35224Vendor Advisory
• http://secunia.com/advisories/35416Vendor Advisory
• http://secunia.com/advisories/35464Vendor Advisory
• http://wiki.rpath.com/Advisories:rPSA-2009-0062
• http://www.debian.org/security/2009/dsa-1785
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:088
• http://www.redhat.com/support/errata/RHSA-2009-1100.html
• http://www.securityfocus.com/archive/1/502745/100/0/threaded
• http://www.securityfocus.com/bid/34291Exploit
• http://www.wireshark.org/security/wnpa-sec-2009-02.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49512
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5976
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9526
• https://www.exploit-db.com/exploits/8308
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html

Published

Apr 1, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1204Cross-site scripting (XSS) vulnerability in TikiWiki (Tiki) …
• CVE-2009-1205Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2009-1206Unspecified vulnerability in futomi's CGI Cafe Access Analyz…
• CVE-2009-1207Race condition in the dircmp script in Sun Solaris 8 through…
• CVE-2009-1208SQL injection vulnerability in auth2db 0.2.5, and possibly o…
• CVE-2009-1209Stack-based buffer overflow in W3C Amaya Web Browser 11.1 al…
• CVE-2009-1211Blue Coat ProxySG, when transparent interception mode is ena…
• CVE-2009-1212Multiple insecure method vulnerabilities in PRECIS~2.DLL in …
• CVE-2009-1213Cross-site request forgery (CSRF) vulnerability in attachmen…
• CVE-2009-1214GNU screen 4.0.3 creates the /tmp/screen-exchange temporary …
• CVE-2009-1215Race condition in GNU screen 4.0.3 allows local users to cre…
• CVE-2009-1216Multiple unspecified vulnerabilities in (1) unlzh.c and (2) …