CVE-2010-0304

CVE-2010-0304 describes multiple buffer overflows in the LWRES dissector within Wireshark versions 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5. This vulnerability allows remote attackers to trigger a denial of service (crash) via a specially crafted packet, specifically leveraging a stack-based buffer overflow in the dissect_getaddrsbyname_request function. With a CVSS score of 7.5, it is considered highly severe, requiring no authentication and low attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. While not listed in CISA's KEV catalog, exploit code is publicly available, including multiple Metasploit modules and ExploitDB entries, indicating a high potential for exploitation, despite a lack of significant community discussion or media coverage.