CVE-2010-4538 Wireshark: Stack-based array index error in ENTTEC dissector

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

 affects ubuntu/wireshark
 status inprogress
 assignee udienz
 importance medium
 security yes
 done

Common Vulnerabilities and Exposures assigned an identifier
CVE-2010-4538 to the following vulnerability:

Name: CVE-2010-4538
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4538
Reference:
# MLIST:[oss-security] 20101231 CVE Request: Wireshark
# URL:http://openwall.com/lists/oss-security/2010/12/31/7
# MLIST:[oss-security] 20110103 Re: CVE Request: Wireshark
# URL:http://openwall.com/lists/oss-security/2011/01/03/8
# CONFIRM:https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5539
# DEBIAN:DSA-2144
# URL:http://www.debian.org/security/2011/dsa-2144
# FEDORA:FEDORA-2011-0128
#
URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053042.html
# FEDORA:FEDORA-2011-0167
#
URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053061.html
# MANDRIVA:MDVSA-2011:002
# URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:002

Buffer overflow in the sect_enttec_dmx_da function in
epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote
attackers to cause a denial of service (application crash) or possibly
execute arbitrary code via a crafted ENTTEC DMX packet with Run Length
Encoding (RLE) compression.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iF4EAREIAAYFAk10WnwACgkQdr7GbwjmqKXwfQD+N9kAPvtjU6fsGutFNB9n4J4J
IC+UtXP428qsVSdRJI4A+gJALrMa86+2troM0Pom8Pv3XFmmjsEVy92DAavLKtbw
=5fYc
-----END PGP SIGNATURE-----