Wireshark information leakage and Denial of Service Vulnerabilities

Release date:
Updated on: 2012-12-09

Affected Systems:
Wireshark 1.6.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 56729

Wireshark (formerly known as Ethereal) is a very popular open-source network traffic analysis software.

Wireshark has information leakage and Multiple Denial-of-Service Vulnerabilities. After successful exploitation, attackers can obtain sensitive information or consume a large amount of CPU and memory resources, resulting in DOS.

<* Source: Wireshark
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Wireshark
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.wireshark.org