Test ID:	1.3.6.1.4.1.25623.1.0.902721
Category:	Denial of Service
Title:	Wireshark ANSI A MAP Files Denial of Service Vulnerability - Windows
Summary:	Wireshark is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Wireshark is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is caused to an infinite loop was found in the way ANSI A Interface dissector of the Wireshark network traffic analyser processed certain ANSI A MAP capture files. If Wireshark read a malformed packet off a network or opened a malicious packet capture file, it could lead to denial of service. Vulnerability Impact: Successful exploitation allows attackers to crash an affected application, denying service to legitimate users. Affected Software/OS: Wireshark version 1.6.0 Wireshark version 1.4.x through 1.4.7 Solution: Upgrade to Wireshark version 1.4.8 or 1.6.1 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2698 45086 http://secunia.com/advisories/45086 45574 http://secunia.com/advisories/45574 48947 http://secunia.com/advisories/48947 49071 http://www.securityfocus.com/bid/49071 FEDORA-2011-9638 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063586.html FEDORA-2011-9640 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063591.html RHSA-2013:0125 http://rhn.redhat.com/errata/RHSA-2013-0125.html [oss-security] 20110719 CVE Request -- Wireshark: Infinite loop in the ANSI A Interface (IS-634/IOS) dissector http://www.openwall.com/lists/oss-security/2011/07/19/5 [oss-security] 20110720 Re: CVE Request -- Wireshark: Infinite loop in the ANSI A Interface (IS-634/IOS) dissector http://www.openwall.com/lists/oss-security/2011/07/20/2 http://anonsvn.wireshark.org/viewvc?view=revision&revision=37930 http://www.wireshark.org/security/wnpa-sec-2011-10.html http://www.wireshark.org/security/wnpa-sec-2011-11.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6044 https://bugzilla.redhat.com/show_bug.cgi?id=723215 oval:org.mitre.oval:def:14610 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14610 wireshark-ansiamap-dos(69074) https://exchange.xforce.ibmcloud.com/vulnerabilities/69074
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.