wireshark: NULL pointer vulnerabilities (wnpa-sec-2012-02)

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet, related to epan/tostr.c...

DEBIAN-CVE-2012-0042

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet, related to epan/tostr.c...

Null pointer dereference

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet, related to epan/tostr.c...

CVE-2012-1594

epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.6.x before 1.6.6 allows remote attackers to cause a denial of service infinite loop via a crafted packet...

CVE-2012-0042: Undefined Security Weakness

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet, related to epan/tostr.c...

Wireshark CSN.1 Dissector Denial of Service Vulnerability - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

CVE-2011-3484: Improper Input Validation

The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6.2 does not properly validate a certain frame size, which allows remote attackers to cause a denial of service loop and application crash via a malformed packet...

CVE-2011-3482: Undefined Security Weakness

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2011-1591

CVE-2011-1591 : Wireshark 1.4.x contains a stack-based buffer overflow in the DECT dissector (epan/dissectors/packet-dect.c). A crafted .pcap enables remote code execution. Affected version range is Wireshark 1.4.x prior to 1.4.5; exploitation involves processing a malformed packet trace file. Mi...

CVE-2011-1592: Undefined Security Weakness

The NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4.5 on Windows uses an incorrect integer data type during decoding of SETCLIENTID calls, which allows remote attackers to cause a denial of service application crash via a crafted .pcap file...

Wireshark BER Dissector Stack Consumption Vulnerability - Windows

Wireshark is prone to stack consumption vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

CVE-2010-3445

CVE-2010-3445 : A stack consumption vulnerability in the BER dissector (epan/dissectors/packet-ber.c) of Wireshark affects the BER ASN.1/BER parser. Versions affected: Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12. Exploitation can be remote via a long string in an unknown ASN.1/BER encode...