Published: 11/04/2012 Updated: 13/02/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The pcap_process_pseudo_header function in wiretap/pcap-common.c in Wireshark 1.4.x prior to 1.4.12 and 1.6.x prior to 1.6.6 allows remote malicious users to cause a denial of service (application crash) via a WTAP_ENCAP_ERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size, related to the pcap and pcap-ng file parsers.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.4.7
wireshark wireshark 1.4.11
wireshark wireshark 1.4.2
wireshark wireshark 1.4.0
wireshark wireshark 1.4.5
wireshark wireshark 1.4.4
wireshark wireshark 1.4.10
wireshark wireshark 1.4.9
wireshark wireshark 1.4.6
wireshark wireshark 1.4.3
wireshark wireshark 1.4.1
wireshark wireshark 1.4.8
wireshark wireshark 1.6.0
wireshark wireshark 1.6.4
wireshark wireshark 1.6.5
wireshark wireshark 1.6.3
wireshark wireshark 1.6.1
wireshark wireshark 1.6.2

Synopsis Moderate: wireshark security update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerab ...

Debian Bug report logs - #666058 Multiple wireshark security flaws resolved in 1412 and 166 (CVE-2012-1593,CVE-2012-1594,CVE-2012-1595,CVE-2012-1596) Package: wireshark; Maintainer for wireshark is Balint Reczey <rbalint@ubuntucom>; Source for wireshark is src:wireshark (PTS, buildd, popcon) Reported by: Henri Salo < ...

CWE-399 http://www.wireshark.org/security/wnpa-sec-2012-06.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6804 http://www.openwall.com/lists/oss-security/2012/03/28/13 http://anonsvn.wireshark.org/viewvc?view=revision&revision=41008 http://secunia.com/advisories/48986 http://lists.opensuse.org/opensuse-updates/2012-04/msg00060.html http://secunia.com/advisories/48947 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15548 http://secunia.com/advisories/48548 https://exchange.xforce.ibmcloud.com/vulnerabilities/74364 http://www.wireshark.org/news/20120327.html http://www.securitytracker.com/id?1026874 http://www.securityfocus.com/bid/52737 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078770.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078769.html https://access.redhat.com/errata/RHSA-2012:0509 https://nvd.nist.gov

CVE-2012-1595

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect