CVE-2011-0444 wireshark: buffer overflow in MAC-LTE disector

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

 affects ubuntu/wireshark
 status inprogress
 assignee udienz
 importance medium
 security yes
 done

Common Vulnerabilities and Exposures assigned an identifier
CVE-2011-0444 to the following vulnerability:

Name: CVE-2011-0444
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0444
Reference: MISC: https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5676
Reference: CONFIRM: http://www.wireshark.org/security/wnpa-sec-2011-01.html
Reference: CONFIRM: http://www.wireshark.org/security/wnpa-sec-2011-02.html
Reference: CONFIRM: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5530
Reference: VUPEN:ADV-2011-0079
Reference: URL: http://www.vupen.com/english/advisories/2011/0079

Buffer overflow in the MAC-LTE dissector
(epan/dissectors/packet-mac-lte.c) in Wireshark 1.2.0 through 1.2.13
and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via a large number
of RARs.

The upstream bug refers to two patches:

http://anonsvn.wireshark.org/viewvc?view=rev&revision=35298 fixes a buffer
overflow in the engineId preferences (seems applicable to 1.0.x also), and
http://anonsvn.wireshark.org/viewvc?view=rev&revision=35292 fixes the buffer
overflow in the MAC LTE dissector (not applicable to 1.0.x; this file is not
shipped).

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iF4EAREIAAYFAk10WdYACgkQdr7GbwjmqKXrFwEAhCTzvZxLU8K8/McBA6j5iHlO
9f7PuUs18hNsw6Wxe3AA/jmLXxQLjdUpmTIdIxFfVF//lDTBX3gJc4GZTsl4picZ
=KRAV
-----END PGP SIGNATURE-----