CVE-2012-4285

The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message.

• CWE-189

• http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=44247&r2=44246&pathrev=44247Patch
• http://anonsvn.wireshark.org/viewvc?view=revision&revision=44247Patch
• http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html
• http://rhn.redhat.com/errata/RHSA-2013-0125.html
• http://secunia.com/advisories/50276
• http://secunia.com/advisories/51363
• http://secunia.com/advisories/54425
• http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml
• http://www.securityfocus.com/bid/55035
• http://www.wireshark.org/security/wnpa-sec-2012-13.htmlVendor Advisory
• https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7566Exploit, Patch
• https://hermes.opensuse.org/messages/15514562
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15712
• http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=44247&r2=44246&pathrev=44247Patch
• http://anonsvn.wireshark.org/viewvc?view=revision&revision=44247Patch
• http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html
• http://rhn.redhat.com/errata/RHSA-2013-0125.html
• http://secunia.com/advisories/50276
• http://secunia.com/advisories/51363
• http://secunia.com/advisories/54425
• http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml
• http://www.securityfocus.com/bid/55035
• http://www.wireshark.org/security/wnpa-sec-2012-13.htmlVendor Advisory
• https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7566Exploit, Patch
• https://hermes.opensuse.org/messages/15514562
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15712

Published

Aug 16, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4279Multiple SQL injection vulnerabilities in Free Realty 3.1-0.…
• CVE-2012-4280Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2012-4281Multiple SQL injection vulnerabilities in Travelon Express 6…
• CVE-2012-4282SQL injection vulnerability in photo.php in Trombinoscope 3.…
• CVE-2012-4283Cross-site scripting (XSS) vulnerability in the Login With A…
• CVE-2012-4284A Privilege Escalation vulnerability exists in Viscosity 1.4…9.8
• CVE-2012-4286The pcapng_read_packet_block function in wiretap/pcapng.c in…
• CVE-2012-4287epan/dissectors/packet-mongo.c in the MongoDB dissector in W…
• CVE-2012-4288Integer overflow in the dissect_xtp_ecntl function in epan/d…
• CVE-2012-4289epan/dissectors/packet-afp.c in the AFP dissector in Wiresha…
• CVE-2012-4290The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x b…
• CVE-2012-4291The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x be…