Published: 30/10/2009 Updated: 19/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Integer overflow in wiretap/erf.c in Wireshark prior to 1.2.2 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an "unsigned integer wrap vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 0.10
wireshark wireshark 0.10.1
wireshark wireshark 0.10.5
wireshark wireshark 0.10.6
wireshark wireshark 0.10.7
wireshark wireshark 0.8.20
wireshark wireshark 0.9.2
wireshark wireshark 0.99.0
wireshark wireshark 0.99
wireshark wireshark 0.99.6a
wireshark wireshark 0.99.1
wireshark wireshark 1.0
wireshark wireshark 1.0.2
wireshark wireshark
wireshark wireshark 0.10.2
wireshark wireshark 0.10.3
wireshark wireshark 0.10.14
wireshark wireshark 0.10.4
wireshark wireshark 0.6
wireshark wireshark 0.8.19
wireshark wireshark 0.9.10
wireshark wireshark 0.9.6
wireshark wireshark 0.99.6
wireshark wireshark 0.99.9
wireshark wireshark 0.99.2
wireshark wireshark 1.0.8
wireshark wireshark 1.0.1
wireshark wireshark 1.2
wireshark wireshark 1.2.0
wireshark wireshark 0.10.12
wireshark wireshark 0.10.13
wireshark wireshark 0.8.16
wireshark wireshark 0.7.9
wireshark wireshark 0.9.5
wireshark wireshark 0.9.8
wireshark wireshark 0.99.3
wireshark wireshark 0.99.8
wireshark wireshark 1.0.6
wireshark wireshark 1.0.7
wireshark wireshark 1.0.0
wireshark wireshark 1.0.9
wireshark wireshark 0.10.10
wireshark wireshark 0.10.11
wireshark wireshark 0.10.8
wireshark wireshark 0.10.9
wireshark wireshark 0.9.7
wireshark wireshark 0.9.14
wireshark wireshark 0.99.5
wireshark wireshark 0.99.4
wireshark wireshark 0.99.7
wireshark wireshark 1.0.5
wireshark wireshark 1.0.4
wireshark wireshark 1.0.3

Synopsis Moderate: wireshark security update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 3, 4, and 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Commo ...

Debian Bug report logs - #553583 CVE-2009-3829 CVE-2009-3551 CVE-2009-3550 CVE-2009-3549 Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Giuseppe Iuculano <iuculano@debianorg> Date: Sun, 1 Nov 2009 09:54:02 ...

Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to the execution of arbitrary code or denial of service The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-2560 A NULL pointer dereference was found in the RADIUS dissector CVE-2009-3550 ...

CWE-189 http://www.kb.cert.org/vuls/id/676492 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3849 http://anonsvn.wireshark.org/viewvc/trunk/wiretap/erf.c?view=markup&pathrev=29364 http://www.wireshark.org/docs/relnotes/wireshark-1.2.2.html http://secunia.com/advisories/37477 http://secunia.com/advisories/37409 http://www.debian.org/security/2009/dsa-1942 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9945 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5979 https://access.redhat.com/errata/RHSA-2010:0360 https://nvd.nist.gov https://www.debian.org/security/./dsa-1942

CVE-2009-3829

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect