Wireshark Multiple Denial of Service Vulnerabilities - Mac OS X

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wireshark Multiple Denial of Service Vulnerabilities (Mac OS X)

This host is installed with Wireshark and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultdosvulnmacosx.nasl 5977 2017-04-19 09:02:22Z teissa $ Wireshark Multiple Denial of Service Vulnerabilities Mac OS X Authors: Madhuri D Copyright:...

Wireshark: Null pointer dereference causing application crash when reading malformed pcap file

epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted .pcap file...

wireshark: Heap-based buffer overflow when reading ERF packets from pcap/pcap-ng trace files

The pcapprocesspseudoheader function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service application crash via a WTAPENCAPERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size,...

Wireshark: Use-after-free causes heap-based buffer overflow in X.509if dissector

The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service application crash via a crafted .pcap file...

Wireshark Multiple Denial of Service Vulnerabilities (Apr 2012) - Windows

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora 17 : wireshark-1.6.6-2.fc17 (2012-5214)

The following vulnerabilities have been fixed. wnpa-sec-2012-04: The ANSI A dissector could dereference a NULL pointer and crash. Bug 6823 wnpa-sec-2012-06: The pcap and pcap-ng file parsers could crash trying to read ERF data. Bug 6804 wnpa-sec-2012-07: The MP2T dissector could try to allocate t...

CVE-2012-1595

The pcapprocesspseudoheader function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service application crash via a WTAPENCAPERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size,...

Code injection

The pcapprocesspseudoheader function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service application crash via a WTAPENCAPERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size,...

CVE-2012-1595

The pcapprocesspseudoheader function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service application crash via a WTAPENCAPERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size,...

CVE-2012-1595

The pcapprocesspseudoheader function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service application crash via a WTAPENCAPERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size,...

CVE-2012-1595

The pcapprocesspseudoheader function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service application crash via a WTAPENCAPERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size,...

CVE-2012-1595: Undefined Security Weakness

The pcapprocesspseudoheader function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service application crash via a WTAPENCAPERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size,...

Wireshark Lua Untrusted Search Path vulnerability

Added: 11/25/2011 CVE: CVE-2011-3360 BID: 49528 OSVDB: 75347 Background Wireshark is a network packet analyzer. Problem A vulnerability in Wireshark allows execution of arbitrary Lua scripts placed in untrusted directories which are included in Wireshark's search path. Resolution Upgrade to...

Wireshark Lua Untrusted Search Path vulnerability

Added: 11/25/2011 CVE: CVE-2011-3360 BID: 49528 OSVDB: 75347 Background Wireshark is a network packet analyzer. Problem A vulnerability in Wireshark allows execution of arbitrary Lua scripts placed in untrusted directories which are included in Wireshark's search path. Resolution Upgrade to...

Wireshark 1.6 console.lua Pre-Load / Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Wireshark...

Wireshark - console.lua pre-loading (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Wireshark...

Wireshark console.lua pre-loading vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Vulnerability in Wireshark Allows For Arbitrary Script Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Wireshark version 1.6.1 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Wireshark. Wireshark has...

Wireshark DECT Dissector Remote Stack Buffer Overflow

Added: 10/19/2011 CVE: CVE-2011-1591 BID: 47392 OSVDB: 71848 Background Wireshark is a network packet analyzer. Problem A buffer overflow vulnerability in the DECT dissector allows command execution when a user sends a specially crafted datagram over a network which is being analyzed by Wireshark...