Wireshark 1.4.x < 1.4.15 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.15 advisory. - Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6...

CVE-2012-4285

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a zero-length message...

DEBIAN-CVE-2012-4285

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a zero-length message...

CVE-2012-4285

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a zero-length message...

CVE-2012-4285

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a zero-length message...

UBUNTU-CVE-2012-4285

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a zero-length message...

CVE-2012-4285

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a zero-length message...

CVE-2012-4285

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a zero-length message...

Scientific Linux Security Update : wireshark on SL5.x i386/x86_64

Several denial of service bugs were found in Wireshark's HTTP, iSeries, DCP ETSI, SSL, MMS, DHCP and BOOTP protocol dissectors. It was possible for Wireshark to crash or stop responding if it read a malformed packet off the network. CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392,...

Wireshark -- Multiple vulnerabilities

Wireshark reports: It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by...

wireshark security and bug fix update

0.99.6-EL4.1.0.1 - Add oracle-ocfs2-network.patch 0.99.6-1 - upgrade to 0.99.6 - Wireshark could crash when dissecting an HTTP chunked response - Wireshark could crash while reading iSeries capture files - Wireshark could exhaust system memory while reading a malformed DCP ETSI packet - Wireshark...

Wireshark 0.99.6版本多个远程拒绝服务漏洞

BUGTRAQ ID: 26532 Wireshark以前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的以下协议处理模块中存在多个死循环、内存耗尽、崩溃或缓冲器溢出漏洞： SSL、ANSI MAP、Firebird/Interbase、NCP、HTTP、MEGACO、DCP ETSI、PPP和蓝牙SDP处理模块 处理畸形的MP3或iSeries（OS/400）通讯追踪文件 处理畸形的DNP或RPC端口映射报文 如果Wireshark受骗从网络抓包或通过抓包文件解析了上述畸形报文的话，就会耗尽大量系统资源。 Wireshark Wireshark 0.8.1...

CVE-2007-6119

The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...

CVE-2007-6119

The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...

Code injection

The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...

DEBIAN-CVE-2007-6119

The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...

CVE-2007-6119

The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...

CVE-2007-6119

CVE-2007-6119:Wireshark (formerly Ethereal) before 0.99.7 is affected; the DCP ETSI dissector in 0.99.6 can cause denial of service (long loop/resource consumption) via unknown vectors. Public advisories (RHSA/CESA/MDA etc.) indicate upgrading to Wireshark 0.99.7 or later mitigates the issue. Oth...

CVE-2007-6119

The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...

RHEL 4 : wireshark (RHSA-2007:0709)

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...