wireshark
Page content
- Author: Miklos Vajna
- Vulnerable: 1.4.3-1
- Unaffected: 1.4.4-1nexon1
Multiple vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
- An error when processing certain pcap-ng files can be exploited to free an uninitialised pointer.
- An error when handling certain packet lengths can be exploited to cause a crash via a specially crafted pcap-ng file.
- An error when processing Nokia DCT3 trace files can be exploited to cause a buffer overflow via a specially crafted file. Successful exploitation of this vulnerability may allow execution of arbitrary code.
- An error in the “dissect_ms_compressed_string()” (SMB dissector) and “dissect_mscldap_string()” (LDAP dissector) functions can be exploited to cause a crash due to an infinite recursive function call.
- An error when processing LDAP Filter strings can be exploited to cause a crash by consuming memory resources via large filter strings.
- A validation error in the “dissect_6lowpan_iphc()” function (epan/dissectors/packet-6lowpan.c) in the 6LoWPAN dissector when processing certain lengths can be exploited to cause a heap-based buffer overflow of a single byte resulting in a crash.
- A NULL pointer dereference error within the “dissect_ntlmssp_string()” function in epan/dissectors/packet-ntlmssp.c when parsing a pcap file can be exploited to cause a crash.
- Bug Tracker URL: http://bugs.frugalware.org/task/4443
CVEs:
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0538
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0713
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1138
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1139
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1140
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1141
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1142
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1143