PT-2012-2259 · Wireshark+3 · Wireshark+3

Gerald Combs

·

Publicado

2012-02-23

·

Atualizado

2017-09-19

·

CVE-2012-0041

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.10 Wireshark versions 1.6.x through 1.6.4
Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by sending a long packet in a capture file. This can be demonstrated using an airopeek file.
Recommendations For Wireshark versions 1.4.x through 1.4.10, update to version 1.4.11 or later. For Wireshark versions 1.6.x through 1.6.4, update to version 1.6.5 or later.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2012_0509
CVE-2012-0041
DSA-2395-1
RHSA-2012:0509
RHSA-2012_0509
RHSA-2013:0125
RHSA-2013_0125
SUSE-SU-2012_0296-1
SUSE-SU-2012_0296-2

Produtos afetados

Centos
Red Hat
Suse
Wireshark