Wireshark USB parser Infinite Loop Vulnerability

Release date:
Updated on: 2012-12-02

Affected Systems:
Wireshark 1.x
Description:
--------------------------------------------------------------------------------
CVE (CAN) ID: CVE-2012-5593

Wireshark (formerly known as Ethereal) is a very popular open-source network traffic analysis software.

The dissect_usb_configuration_descriptor function in epan/dissectors/packet-usb.c in Wireshark 1.6.0-1.6.11, 1.8.0-1.8.3 USB parser has a security vulnerability, which allows remote attackers to cause DOS through specially crafted packets.

<* Source: Wireshark (http://www.wireshark.org /)

Link: https://bugzilla.RedHat.com/show_bug.cgi? Id = 881822
Http://secunia.com/advisories/51422/
Http://www.wireshark.org/security/wnpa-sec-2012-31.html
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

Wireshark (http://www.wireshark.org/) provides the following testing methods:
For more information about pcap packages, see
Http://www.wireshark.org/download/automated/captures/fuzz-2012-10-03-20994.pcap

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Wireshark
---------
FIX:
Http://anonsvn.wireshark.org/viewvc? View = revision & revision = 45310
New Version:
Http://www.wireshark.org/download.html