Published: 11/04/2012 Updated: 19/09/2017

CVSS v2 Base Score: 2.9 | Impact Score: 2.9 | Exploitability Score: 5.5

VMScore: 258

Vector: AV:A/AC:M/Au:N/C:N/I:N/A:P

Wireshark 1.4.x prior to 1.4.11 and 1.6.x prior to 1.6.5 does not properly perform certain string conversions, which allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet, related to epan/to_str.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.6.0
wireshark wireshark 1.6.3
wireshark wireshark 1.6.4
wireshark wireshark 1.6.1
wireshark wireshark 1.6.2
redhat enterprise linux 5
wireshark wireshark 1.4.5
wireshark wireshark 1.4.6
wireshark wireshark 1.4.7
wireshark wireshark 1.4.0
wireshark wireshark 1.4.8
wireshark wireshark 1.4.9
wireshark wireshark 1.4.3
wireshark wireshark 1.4.4
wireshark wireshark 1.4.1
wireshark wireshark 1.4.2
wireshark wireshark 1.4.10

Synopsis Moderate: wireshark security update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerab ...

Synopsis Moderate: wireshark security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix several security issues, three bugs,and add one enhancement are now available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated ...

Laurent Butti discovered a buffer underflow in the LANalyzer dissector of the Wireshark network traffic analyzer, which could lead to the execution of arbitrary code (CVE-2012-0068) This update also addresses several bugs, which can lead to crashes of Wireshark These are not treated as security issues, but are fixed nonetheless if security updat ...

NVD-CWE-Other http://anonsvn.wireshark.org/viewvc?view=revision&revision=40194 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6634 http://www.wireshark.org/security/wnpa-sec-2012-02.html http://www.openwall.com/lists/oss-security/2012/01/11/7 http://secunia.com/advisories/48947 http://rhn.redhat.com/errata/RHSA-2013-0125.html http://www.securitytracker.com/id?1026507 http://secunia.com/advisories/47494 http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml http://secunia.com/advisories/54425 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15368 https://access.redhat.com/errata/RHSA-2012:0509 https://www.debian.org/security/./dsa-2395 https://nvd.nist.gov

CVE-2012-0042

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect