Wireshark Heap Based BOF and Denial of Service Vulnerabilities (Windows)

The host is installed with Wireshark and is prone to heap based buffer overflow and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkbofndosvulnwin.nasl 7052 2017-09-04 11:50:51Z teissa $ Wireshark Heap Based BOF and Denial of Service Vulnerabilities Windows Authors:...

CVE-2011-4101

The dissectinfinibandcommon function in epan/dissectors/packet-infiniband.c in the Infiniband dissector in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed packet...

CVE-2011-4101

Wireshark vulnerable in the Infiniband dissector: the dissect_infiniband_common function in epan/dissectors/packet-infiniband.c can dereference NULL on malformed packets, affecting Wireshark 1.4.0–1.4.9 and 1.6.x prior to 1.6.3, causing denial of service (crash). Remediation per advisories is to ...