Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.802308
Category:Denial of Service
Title:Wireshark Lucent/Ascend File Parser Denial of Service Vulnerability - Windows
Summary:Wireshark is prone to a denial of service (DoS) vulnerability.
Description:Summary:
Wireshark is prone to a denial of service (DoS) vulnerability.

Vulnerability Insight:
The flaw is due to an error in Lucent/Ascend file parser when
processing malicious packets.

Vulnerability Impact:
Successful exploitation allows attackers to cause the application to enter
into an infinite loop and crash it.

Affected Software/OS:
Wireshark version 1.2.0 to 1.2.17, 1.4.0 to 1.4.7 and 1.6.0

Solution:
Upgrade to Wireshark 1.2.18 or later

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2011-2597
BugTraq ID: 48506
http://www.securityfocus.com/bid/48506
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063586.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063591.html
http://www.mandriva.com/security/advisories?name=MDVSA-2011:118
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14794
http://securitytracker.com/id?1025738
http://secunia.com/advisories/45086
http://secunia.com/advisories/45574
http://secunia.com/advisories/48947
SuSE Security Announcement: SUSE-SU-2011:1262 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00021.html
SuSE Security Announcement: openSUSE-SU-2011:1263 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00022.html
XForce ISS Database: wireshark-lucent-dos(68335)
https://exchange.xforce.ibmcloud.com/vulnerabilities/68335
CopyrightCopyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.