epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "2.0.0"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.1"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.2"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.3"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.4"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.5"
}
]
}