Published: 21/12/2009 Updated: 19/09/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 up to and including 1.2.4 allow remote malicious users to cause a denial of service (crash) via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 0.99.7
wireshark wireshark 0.99.5
wireshark wireshark 0.99.4
wireshark wireshark 0.9.10
wireshark wireshark 0.99.9
wireshark wireshark 1.0.1
wireshark wireshark 1.0.4
wireshark wireshark 1.0
wireshark wireshark 1.0.2
wireshark wireshark 0.9.7
wireshark wireshark 0.9.2
wireshark wireshark 0.9.8
wireshark wireshark 0.99.1
wireshark wireshark 0.99.0
wireshark wireshark 1.2
wireshark wireshark 1.0.9
wireshark wireshark 1.2.2
wireshark wireshark 1.0.0
wireshark wireshark 0.9.14
wireshark wireshark 0.99.6
wireshark wireshark 0.9.5
wireshark wireshark 0.9.6
wireshark wireshark 0.99
wireshark wireshark 1.0.6
wireshark wireshark 1.0.8
wireshark wireshark 1.2.3
wireshark wireshark 1.2.0
wireshark wireshark 1.2.4
wireshark wireshark 0.99.3
wireshark wireshark 0.99.8
wireshark wireshark 0.99.2
wireshark wireshark 0.99.6a
wireshark wireshark 1.0.5
wireshark wireshark 1.0.7
wireshark wireshark 1.2.1
wireshark wireshark 1.0.3

Synopsis Moderate: wireshark security update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 3, 4, and 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Commo ...

Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to the execution of arbitrary code or denial of service The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-4377 A NULL pointer dereference was found in the SMB/SMB2 dissectors CVE-2010-0304 ...

NVD-CWE-noinfo http://www.vupen.com/english/advisories/2009/3596 http://www.securityfocus.com/bid/37407 http://secunia.com/advisories/37842 http://www.securitytracker.com/id?1023374 http://www.wireshark.org/security/wnpa-sec-2009-09.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4301 http://osvdb.org/61178 https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html http://secunia.com/advisories/37916 http://www.debian.org/security/2009/dsa-1983 http://www.mandriva.com/security/advisories?name=MDVSA-2010:031 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9564 https://access.redhat.com/errata/RHSA-2010:0360 https://nvd.nist.gov https://www.debian.org/security/./dsa-1983

CVE-2009-4377

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect