CVE-2008-3139

2008-07-1023:41:00

CWE-200

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

wireshark

rtmpt

dissector

denial of service

vulnerability

cve-2008-3139

6.3 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

72.3%

JSON

The RTMPT dissector in Wireshark (formerly Ethereal) 0.99.8 through 1.0.0 allows remote attackers to cause a denial of service (crash) via unknown vectors. NOTE: this might be due to a use-after-free error.

CPENameOperatorVersion
wireshark:wiresharkwiresharkeq0.99.8
wireshark:wiresharkwiresharkeq0.99.3
wireshark:wiresharkwiresharkeq0.9.5
wireshark:wiresharkwiresharkeq1.0
wireshark:wiresharkwiresharkeq0.99.6
wireshark:wiresharkwiresharkeq0.99.2
rpath:rpath_linuxrpath rpath linuxeq1
wireshark:wiresharkwiresharkeq0.99.5
wireshark:wiresharkwiresharkeq0.99.4
wireshark:wiresharkwiresharkeq1.0.0

CPE	Name	Operator	Version
wireshark:wireshark	wireshark	eq	0.99.8
wireshark:wireshark	wireshark	eq	0.99.3
wireshark:wireshark	wireshark	eq	0.9.5
wireshark:wireshark	wireshark	eq	1.0
wireshark:wireshark	wireshark	eq	0.99.6
wireshark:wireshark	wireshark	eq	0.99.2
rpath:rpath_linux	rpath rpath linux	eq	1
wireshark:wireshark	wireshark	eq	0.99.5
wireshark:wireshark	wireshark	eq	0.99.4
wireshark:wireshark	wireshark	eq	1.0.0