4.3
CVSSv2

CVE-2009-3550

Published: 30/10/2009 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

The DCERPC/NT dissector in Wireshark 0.10.10 up to and including 1.0.9 and 1.2.0 up to and including 1.2.2 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

wireshark wireshark 0.10.3

wireshark wireshark 0.10.6

wireshark wireshark 1.0.9

wireshark wireshark 0.10.4

wireshark wireshark 1.0.1

wireshark wireshark 0.10.14

wireshark wireshark 1.2.0

wireshark wireshark 0.10.9

wireshark wireshark 0.10.7

wireshark wireshark 1.0

wireshark wireshark 0.10.8

wireshark wireshark 1.0.2

wireshark wireshark 1.0.4

wireshark wireshark 1.0.3

wireshark wireshark 1.0.6

wireshark wireshark 0.10.2

wireshark wireshark 0.10.13

wireshark wireshark 1.2.1

wireshark wireshark 0.10.12

wireshark wireshark 0.10.10

wireshark wireshark 1.0.8

wireshark wireshark 1.0.5

wireshark wireshark 0.10.5

wireshark wireshark 1.2

wireshark wireshark 0.10.11

wireshark wireshark 1.2.2

wireshark wireshark 1.0.0

wireshark wireshark 1.0.7

Vendor Advisories

Synopsis Moderate: wireshark security update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 3, 4, and 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Commo ...
Debian Bug report logs - #553583 CVE-2009-3829 CVE-2009-3551 CVE-2009-3550 CVE-2009-3549 Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Giuseppe Iuculano <iuculano@debianorg> Date: Sun, 1 Nov 2009 09:54:02 ...
Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to the execution of arbitrary code or denial of service The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-2560 A NULL pointer dereference was found in the RADIUS dissector CVE-2009-3550 ...