Published: 30/06/2012 Updated: 19/09/2017

CVSS v2 Base Score: 3.3 | Impact Score: 2.9 | Exploitability Score: 6.5

VMScore: 335

Vector: AV:A/AC:L/Au:N/C:N/I:N/A:P

Multiple integer overflows in Wireshark 1.4.x prior to 1.4.13 and 1.6.x prior to 1.6.8 allow remote malicious users to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark 1.4.5
wireshark wireshark 1.4.7
wireshark wireshark 1.4.12
wireshark wireshark 1.4.13
wireshark wireshark 1.6.6
wireshark wireshark 1.6.7
wireshark wireshark 1.4.11
wireshark wireshark 1.4.6
wireshark wireshark 1.4.0
wireshark wireshark 1.4.4
wireshark wireshark 1.6.4
wireshark wireshark 1.6.5
wireshark wireshark 1.4.9
wireshark wireshark 1.4.3
wireshark wireshark 1.4.2
wireshark wireshark 1.4.1
wireshark wireshark 1.6.2
wireshark wireshark 1.6.3
wireshark wireshark 1.4.8
wireshark wireshark 1.4.10
wireshark wireshark 1.6.0
wireshark wireshark 1.6.1

Synopsis Moderate: wireshark security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic Updated wireshark packages that fix multiple security issues, several bugs,and add various enhancements are now available for Red Hat EnterpriseLinux 6The Red Hat Security Response Team ha ...

Two flaws were found in Wireshark If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark (CVE-2013-3559, CVE-2013-4083) Several denial of service flaws were found in Wireshark Wireshark could crash or stop responding if it read a malfor ...

source: wwwsecurityfocuscom/bid/53651/info Wireshark is prone to multiple denial-of-service vulnerabilities An attacker can exploit these issues to crash the affected application, denying service to legitimate users Wireshark versions 160 through 167 and versions 140 through 1412 are vulnerable PoC: githubcom/offe ...

CWE-189 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7121 http://www.wireshark.org/security/wnpa-sec-2012-08.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7122 http://secunia.com/advisories/49226 http://www.securitytracker.com/id?1027094 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15478 https://access.redhat.com/errata/RHSA-2013:1569 https://nvd.nist.gov https://www.exploit-db.com/exploits/18919/https://alas.aws.amazon.com/ALAS-2013-251.html

CVE-2012-3825

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect