4.3
CVSSv2

CVE-2012-0068

Published: 11/04/2012 Updated: 27/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

The lanalyzer_read function in wiretap/lanalyzer.c in Wireshark 1.4.x prior to 1.4.11 and 1.6.x prior to 1.6.5 allows remote malicious users to cause a denial of service (application crash) via a Novell capture file containing a record that is too small.

Vulnerable Product Search on Vulmon Subscribe to Product

wireshark wireshark 1.4.2

wireshark wireshark 1.4.3

wireshark wireshark 1.4.11

wireshark wireshark 1.4.4

wireshark wireshark 1.4.5

wireshark wireshark 1.4.0

wireshark wireshark 1.4.1

wireshark wireshark 1.4.9

wireshark wireshark 1.4.10

wireshark wireshark 1.4.6

wireshark wireshark 1.4.7

wireshark wireshark 1.4.8

wireshark wireshark 1.6.0

wireshark wireshark 1.6.1

wireshark wireshark 1.6.4

wireshark wireshark 1.6.5

wireshark wireshark 1.6.2

wireshark wireshark 1.6.3

Vendor Advisories

Laurent Butti discovered a buffer underflow in the LANalyzer dissector of the Wireshark network traffic analyzer, which could lead to the execution of arbitrary code (CVE-2012-0068) This update also addresses several bugs, which can lead to crashes of Wireshark These are not treated as security issues, but are fixed nonetheless if security updat ...