81 matches found
Heap overflow
Heap-based buffer overflow in the erfreadheader function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service application crash via a malformed file...
CVE-2011-4102
Heap-based buffer overflow in the erfreadheader function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service application crash via a malformed file...
CVE-2011-4102
Heap-based buffer overflow in the erfreadheader function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service application crash via a malformed file...
Wireshark 1.4.x < 1.4.10 Multiple Vulnerabilities
The installed version of Wireshark is 1.4.x before 1.4.10. This version is affected by the following vulnerabilities : - An error exists in the Infiniband dissector that can allow a NULL pointer to be dereferenced when processing certain malformed packets. CVE-2011-4101 - A buffer overflow exists...
wireshark: unsigned integer wrap vulnerability in ERF reader (VU#676492)
Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted erf file, related to an "unsigned integer wrap vulnerability."...
wireshark security update
1.0.11-1.0.1.el55.5 - Add oracle-ocfs2-network.patch 1.0.11-1.5 - rebuild without smp flags fixes problems with doc generating 1.0.11-1.4 - add erf overflow patch - Resolves 532479 1.0.11-1.3 - bring back pie patch from Jindrich Novy - no GUI freeze - Resolves: 549583...
Debian DSA-1942-1 : wireshark - several vulnerabilities
Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2560 A NULL pointer dereference wa...
Debian Security Advisory DSA 1942-1 (wireshark)
The remote host is missing an update to wireshark announced via advisory DSA 1942-1. OpenVAS Vulnerability Test $Id: deb19421.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1942-1 wireshark Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Mandriva Security Advisory MDVSA-2009:292-1 (wireshark)
The remote host is missing an update to wireshark announced via advisory MDVSA-2009:292-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
SuSE 11 Security Update : wireshark (SAT Patch Number 1606)
Version upgrade of wireshark fix multiple vulnerabilities : - The Paltalk dissector could crash on alignment-sensitive processors. CVE-2009-3549: CVSS v2 Base Score: 5.0 MEDIUM - The DCERPC/NT dissector could crash. CVE-2009-3550: CVSS v2 Base Score: 4.3 MEDIUM - The SMB dissector could crash...
Mandriva Linux Security Advisory : wireshark (MDVSA-2009:292-1)
"Vulnerabilities have been discovered and corrected in wireshark, affecting DCERPC/NT dissector, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a file that records a malformed packet trace CVE-2009-3550 %NASLMINLEVEL 70300 C Tenable...
openSUSE Security Update : wireshark (wireshark-1600)
Version upgrade of wireshark fix multiple vulnerabilities : - CVE-2009-3549: CVSS v2 Base Score: 5.0 MEDIUM The Paltalk dissector could crash on alignment-sensitive processors. - CVE-2009-3550: CVSS v2 Base Score: 4.3 MEDIUM The DCERPC/NT dissector could crash. - CVE-2009-3551: CVSS v2 Base Score...
openSUSE Security Update : wireshark (wireshark-1600)
Version upgrade of wireshark fix multiple vulnerabilities : - CVE-2009-3549: CVSS v2 Base Score: 5.0 MEDIUM The Paltalk dissector could crash on alignment-sensitive processors. - CVE-2009-3550: CVSS v2 Base Score: 4.3 MEDIUM The DCERPC/NT dissector could crash. - CVE-2009-3551: CVSS v2 Base Score...
openSUSE Security Update : wireshark (wireshark-1600)
Version upgrade of wireshark fix multiple vulnerabilities : - CVE-2009-3549: CVSS v2 Base Score: 5.0 MEDIUM The Paltalk dissector could crash on alignment-sensitive processors. - CVE-2009-3550: CVSS v2 Base Score: 4.3 MEDIUM The DCERPC/NT dissector could crash. - CVE-2009-3551: CVSS v2 Base Score...
CVE-2009-3829
Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted erf file, related to an "unsigned integer wrap vulnerability."...
CVE-2009-3829
Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted erf file, related to an "unsigned integer wrap vulnerability."...
DEBIAN-CVE-2009-3829
Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted erf file, related to an "unsigned integer wrap vulnerability."...
Integer overflow
Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted erf file, related to an "unsigned integer wrap vulnerability."...
CVE-2009-3829
Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted erf file, related to an "unsigned integer wrap vulnerability."...
Wireshark ERF文件远程代码执行漏洞
Bugraq ID: 36591 Wireshark是一款开放源代码的网络协议分析工具。 Wireshark导入文件时存在一个无符号整数围包漏洞，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当处理ERF文件时一个无符号整数围包漏洞可使Wireshark分配一个很大的缓冲区，要利用此漏洞，需要用户使用应用程序打开特殊构建的ERF文件。 Wireshark Wireshark 1.2.1 Wireshark Wireshark 1.2 Wireshark Wireshark 1.0.8 Wireshark Wireshark 1.0.7 Wireshark Wireshark 1.0...