Libpcap Buffer Overflow Vulnerability in UTF-8 Conversion on Windows

A buffer overflow vulnerability has been identified in libpcap, specifically on Windows systems. The issue arises when libpcap attempts to convert a Windows error message to UTF-8. If the message contains characters that UTF-8 encodes using four bytes, the function 'utf_16le_to_utf_8_truncated()' can inadvertently write beyond the end of the allocated buffer. This vulnerability affects libpcap versions prior to 1.10.6.

Impact

Exploitation of this vulnerability can lead to a buffer overflow, which may allow for arbitrary code execution or cause a denial-of-service condition.

Remediation

Users can upgrade to libpcap version 1.10.6 or later to address this vulnerability.