Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_fixed_in_wireshark)

The remote Solaris system is missing necessary patches to address security updates : - Wireshark 1.8.x before 1.8.4 allows remote attackers to obtain sensitive hostname information by reading pcap-ng files. CVE-2012-6052 - epan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x befor...

CVE-2012-5602

CVE-2012-5602 is rejected and not used; reference CVE-2012-6058.

CVE-2012-6058

CVE-2012-6058 : Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 is vulnerable to an integer overflow in the ICMPv6 dissector (epan/dissectors/packet-icmpv6.c) that can be exploited by a crafted Number of Sources value to trigger a denial of service (infinite loop). Remediation: upgrade to Wi...