CVE-2010-2995

The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, different vulnerabilities than CVE-2010-2287.

• CWE-189

• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
• http://secunia.com/advisories/42877Vendor Advisory
• http://secunia.com/advisories/43068Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0076Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0212Vendor Advisory
• http://www.wireshark.org/docs/relnotes/wireshark-1.2.10.htmlVendor Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4867
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12049
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
• http://secunia.com/advisories/42877Vendor Advisory
• http://secunia.com/advisories/43068Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0076Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0212Vendor Advisory
• http://www.wireshark.org/docs/relnotes/wireshark-1.2.10.htmlVendor Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4867
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12049

Published

Aug 13, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2989nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.…
• CVE-2010-2990Citrix Online Plug-in for Windows for XenApp & XenDesktop be…
• CVE-2010-2991The IICAClient interface in the ICAClient library in the ICA…
• CVE-2010-2992packet-gsm_a_rr.c in the GSM A RR dissector in Wireshark 1.2…
• CVE-2010-2993The IPMI dissector in Wireshark 1.2.0 through 1.2.9 allows r…
• CVE-2010-2994Stack-based buffer overflow in the ASN.1 BER dissector in Wi…
• CVE-2010-2996Array index error in RealNetworks RealPlayer 11.0 through 11…
• CVE-2010-2997Use-after-free vulnerability in RealNetworks RealPlayer 11.0…
• CVE-2010-2998Array index error in RealNetworks RealPlayer 11.0 through 11…
• CVE-2010-2999Integer overflow in RealNetworks RealPlayer 11.0 through 11.…
• CVE-2010-3000Multiple integer overflows in the ParseKnownType function in…
• CVE-2010-3001Unspecified vulnerability in an ActiveX control in the Inter…