Wireshark Visual C++ Analyzer Buffer Overflow Vulnerability

Bugtraq ID:	46416
Class:	Boundary Condition Error
CVE:	CVE-2011-0713
Remote:	Yes
Local:	No
Published:	Feb 16 2011 12:00AM
Updated:	Apr 13 2015 10:10PM
Credit:	gerald
Vulnerable:	Wireshark Wireshark 1.4.3 Wireshark Wireshark 1.4.2 Wireshark Wireshark 1.4.1 Wireshark Wireshark 1.2.12 Wireshark Wireshark 1.2.10 Wireshark Wireshark 1.2.9 Wireshark Wireshark 1.2.8 Wireshark Wireshark 1.2.7 Wireshark Wireshark 1.2.6 Wireshark Wireshark 1.2.5 Wireshark Wireshark 1.2.4 Wireshark Wireshark 1.2.3 Wireshark Wireshark 1.2.2 Wireshark Wireshark 1.2.1 Wireshark Wireshark 1.2 Wireshark Wireshark 1.4.1 Wireshark Wireshark 1.4.0 Wireshark Wireshark 1.2.14 Wireshark Wireshark 1.2.13 Wireshark Wireshark 1.2.12 Wireshark Wireshark 1.2.11 SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 10 SP4 SuSE SUSE Linux Enterprise 10 SP3 S.u.S.E. openSUSE 11.4 S.u.S.E. openSUSE 11.3 S.u.S.E. openSUSE 11.2 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Pardus Linux 2011 0 Pardus Linux 2009 0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:	Wireshark Wireshark 1.4.4 Wireshark Wireshark 1.2.15

Wireshark Visual C++ Analyzer Buffer Overflow Vulnerability

Wireshark is prone to a buffer-overflow vulnerability.

Exploiting this issue may allow attackers to crash the application and deny service to legitimate users. Attackers may also execute arbitrary code in the context of vulnerable users running the application.

Wireshark Visual C++ Analyzer Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Wireshark Visual C++ Analyzer Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


MandrakeSoft Enterprise Server 5 x86_64

• Mandriva dumpcap-1.2.15-0.1mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark-devel-1.2.15-0.1mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark0-1.2.15-0.1mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.2.15-0.1mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.2.15-0.1mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.2.15-0.1mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.2.15-0.1mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5

• Mandriva dumpcap-1.2.15-0.1mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark-devel-1.2.15-0.1mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark0-1.2.15-0.1mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.2.15-0.1mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.2.15-0.1mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.2.15-0.1mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.2.15-0.1mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva dumpcap-1.2.15-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark-devel-1.2.15-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark0-1.2.15-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.2.15-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.2.15-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.2.15-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.2.15-0.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2010.0

• Mandriva dumpcap-1.2.15-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark-devel-1.2.15-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark0-1.2.15-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.2.15-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.2.15-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.2.15-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.2.15-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2010.0 x86_64

• Mandriva dumpcap-1.2.15-0.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark-devel-1.2.15-0.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark0-1.2.15-0.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.2.15-0.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.2.15-0.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.2.15-0.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.2.15-0.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2010.1

• Mandriva dumpcap-1.2.15-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark-devel-1.2.15-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark0-1.2.15-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.2.15-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.2.15-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.2.15-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.2.15-0.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0

• Mandriva dumpcap-1.2.15-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark-devel-1.2.15-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libwireshark0-1.2.15-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.2.15-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.2.15-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.2.15-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.2.15-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva dumpcap-1.2.15-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark-devel-1.2.15-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64wireshark0-1.2.15-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva rawshark-1.2.15-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva tshark-1.2.15-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-1.2.15-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva wireshark-tools-1.2.15-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

Wireshark Visual C++ Analyzer Buffer Overflow Vulnerability

References:

• Fix a buffer overflow found by the Visual C++ analyzer. (Wireshark)
  
• Wireshark Homepage (Wireshark)
  
• MAC-LTE, ENTTEC, and ASN.1 BER vulnerabilities in Wireshark® version 1.4.0 (Wireshark)
  
• Multiple vulnerabilities in Wireshark® version 1.2.0 to 1.2.14 (Wireshark)
  
• Wireshark 1.4.4 and 1.2.15 Released (Wireshark)