ID de Prueba:	1.3.6.1.4.1.25623.1.0.802847
Categoría:	Buffer overflow
Título:	Wireshark LDSS Dissector Buffer Overflow Vulnerability - Mac OS X
Resumen:	Wireshark is prone to a buffer overflow vulnerability.
Descripción:	Summary: Wireshark is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw is due to heap based buffer overflow in 'dissect_ldss_transfer()' function (epan/dissectors/packet-ldss.c) in the LDSS dissector, which allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via an LDSS packet with a long digest line. Vulnerability Impact: Successful exploitation will allow attackers to crash the application. Affected Software/OS: Wireshark version 1.2.0 to 1.2.12 and 1.4.0 to 1.4.1 Solution: Upgrade to Wireshark 1.4.2 or 1.2.13 later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4300 BugTraq ID: 44987 http://www.securityfocus.com/bid/44987 http://www.exploit-db.com/exploits/15676 http://www.mandriva.com/security/advisories?name=MDVSA-2010:242 http://osvdb.org/69354 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14287 http://www.redhat.com/support/errata/RHSA-2010-0924.html http://www.securitytracker.com/id?1024762 http://secunia.com/advisories/42290 http://secunia.com/advisories/42411 http://secunia.com/advisories/42877 http://secunia.com/advisories/43068 SuSE Security Announcement: SUSE-SR:2011:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html SuSE Security Announcement: SUSE-SR:2011:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://www.vupen.com/english/advisories/2010/3038 http://www.vupen.com/english/advisories/2010/3068 http://www.vupen.com/english/advisories/2010/3093 http://www.vupen.com/english/advisories/2011/0076 http://www.vupen.com/english/advisories/2011/0212 http://www.vupen.com/english/advisories/2011/0404
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.