PT-2012-2271 · Wireshark+3 · Wireshark+3

Laurent Butti

·

Publicado

2012-04-11

·

Atualizado

2017-09-19

·

CVE-2012-0066

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.10 Wireshark versions 1.6.x through 1.6.4
Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by sending a long packet in a file, specifically in Accellent 5Views, I4B trace, or NETMON 2 capture files.
Recommendations For Wireshark versions 1.4.x through 1.4.10, update to version 1.4.11 or later. For Wireshark versions 1.6.x through 1.6.4, update to version 1.6.5 or later.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2012_0509
CVE-2012-0066
DSA-2395-1
RHSA-2012:0509
RHSA-2012_0509
RHSA-2013:0125
RHSA-2013_0125

Produtos afetados

Centos
Red Hat
Suse
Wireshark