Test ID:	1.3.6.1.4.1.25623.1.0.801828
Category:	Buffer overflow
Title:	Wireshark ENTTEC DMX Data RLE Buffer Overflow Vulnerability (Win)
Summary:	Check for the version of Wireshark
Description:	Overview: This host is installed with Wireshark and is prone to buffer overflow vulnerability. Vulnerability Insight: The flaw is caused by a boundary error in the 'dissect_enttec_dmx_data()' function when processing RLE Compressed DMX data of the ENTTEC protocol which can be exploited to cause a buffer overflow via a specially crafted packet. Impact: Successful exploitation will allow attackers to create a denial of service or execute arbitrary code. Impact Level: Application Affected Software/OS: Wireshark version 1.4.2 Fix: Upgrade to the latest version of Wireshark 1.4.3, For updates refer to http://www.wireshark.org/download References: http://osvdb.org/70244 http://secunia.com/advisories/42767 http://www.vupen.com/english/advisories/2011/0079 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5539
Cross-Ref:	BugTraq ID: 45634 Common Vulnerability Exposure (CVE) ID: CVE-2010-4538 http://openwall.com/lists/oss-security/2010/12/31/7 http://openwall.com/lists/oss-security/2011/01/03/8 Debian Security Information: DSA-2144 (Google Search) http://www.debian.org/security/2011/dsa-2144 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053042.html http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053061.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:002 http://www.redhat.com/support/errata/RHSA-2011-0013.html http://www.securityfocus.com/bid/45634 http://osvdb.org/70244 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14937 http://www.securitytracker.com/id?1024930 http://secunia.com/advisories/42767 http://secunia.com/advisories/42853 http://secunia.com/advisories/42914 http://secunia.com/advisories/42910 http://www.vupen.com/english/advisories/2011/0079 http://www.vupen.com/english/advisories/2011/0008 http://www.vupen.com/english/advisories/2011/0053 http://www.vupen.com/english/advisories/2011/0069 http://www.vupen.com/english/advisories/2011/0099 http://www.vupen.com/english/advisories/2011/0110
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: