Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.802625
Categoría:Denial of Service
Título:Wireshark Multiple Denial of Service Vulnerabilities - Mac OS X
Resumen:Wireshark is prone to multiple denial of service vulnerabilities.
Descripción:Summary:
Wireshark is prone to multiple denial of service vulnerabilities.

Vulnerability Insight:
- An error related to an uninitialised variable within the CSN.1 dissector
can be exploited to cause a crash.

- A buffer exception handling vulnerability exists that can allow denial of
service attacks when processing certain malformed packets.

- An error within the OpenSafety dissector can be exploited to cause a large
loop and crash the application.

Vulnerability Impact:
Successful exploitation will allow remote attackers to cause a denial of
service.

Affected Software/OS:
Wireshark versions 1.6.x before 1.6.2 on Mac OS X

Solution:
Upgrade to the Wireshark version 1.6.2 or later.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2011-3482
http://www.mandriva.com/security/advisories?name=MDVSA-2011:138
http://www.openwall.com/lists/oss-security/2011/09/13/1
http://www.openwall.com/lists/oss-security/2011/09/14/10
http://www.openwall.com/lists/oss-security/2011/09/14/5
http://www.openwall.com/lists/oss-security/2011/09/14/9
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14886
Common Vulnerability Exposure (CVE) ID: CVE-2011-3483
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14971
Common Vulnerability Exposure (CVE) ID: CVE-2011-3484
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15062
CopyrightCopyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.