|Category:||Denial of Service|
|Title:||Wireshark DOCSIS Dissector Denial of Service Vulnerability (Win)|
|Summary:||Check for the version of Wireshark|
Overview: This host is installed with Wireshark and is prone to
denial of service vulnerability.
The flaw is caused by an error in the DOCSIS (Data Over Cable Service
Interface Specification) dissector when processing malformed data. An
attacker can exploit this vulnerability by tricking a user into opening
a malformed packet trace file.
Successful exploitation will allow attackers to crash the application.
Impact Level: Application
Wireshark Version 0.9.6 through 1.0.12 and
Wireshark Version 1.2.0 through 1.2.7
Upgrade to the latest version of Wireshark 1.2.8 or 1.0.13,
For updates refer to http://www.wireshark.org/download
BugTraq ID: 39950|
Common Vulnerability Exposure (CVE) ID: CVE-2010-1455
SuSE Security Announcement: SUSE-SR:2011:001 (Google Search)
SuSE Security Announcement: SUSE-SR:2011:002 (Google Search)
XForce ISS Database: wireshark-docsis-dos(58362)
|Copyright||Copyright (C) 2010 Greenbone Networks GmbH|
|This is only one of 49772 vulnerability tests in our test suite. Find out more about running a complete security audit.|
To run a free test of this vulnerability against your system, register below.