Wireshark buffer overflow and Denial of Service Vulnerabilities

Release date:
Updated on:

Affected Systems:
Wireshark 1.6.x
Wireshark 1.4.x
Unaffected system:
Wireshark 1.6.5
Wireshark 1.4.11
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51368

Wireshark (formerly known as Ethereal) is a network group analysis software.

Wireshark checks the file format of captured packets for a long time, and has buffer overflow and denial of service vulnerabilities in the implementation of malformed packets. Remote attackers can exploit these vulnerabilities to execute arbitrary code, cause a denial of service.

<* Source: nechtom

Link: http://www.wireshark.org/security/wnpa-sec-2012-01.html
Http://www.wireshark.org/security/wnpa-sec-2012-03.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Wireshark
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.wireshark.org/security/