Wireshark Buffer Underflow and Denial of Service Vulnerabilities

Bugtraq ID:	51710
Class:	Unknown
CVE:	CVE-2012-0066 CVE-2012-0067 CVE-2012-0068
Remote:	Yes
Local:	No
Published:	Jan 10 2012 12:00AM
Updated:	Nov 27 2013 12:14AM
Credit:	Laurent Butti
Vulnerable:	Wireshark Wireshark 1.6.4 Wireshark Wireshark 1.6.3 Wireshark Wireshark 1.6.2 Wireshark Wireshark 1.6.1 Wireshark Wireshark 1.6 Wireshark Wireshark 1.4.10 Wireshark Wireshark 1.4.9 Wireshark Wireshark 1.4.8 Wireshark Wireshark 1.4.7 Wireshark Wireshark 1.4.6 Wireshark Wireshark 1.4.5 Wireshark Wireshark 1.4.4 Wireshark Wireshark 1.4.3 Wireshark Wireshark 1.4.2 Wireshark Wireshark 1.4.1 Wireshark Wireshark 1.4.1 Wireshark Wireshark 1.4.0 RedHat Enterprise Linux Desktop Workstation 5 client Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 5
Not Vulnerable:	Wireshark Wireshark 1.6.5 Wireshark Wireshark 1.4.11

Wireshark Buffer Underflow and Denial of Service Vulnerabilities

Wireshark is prone to a buffer-underflow vulnerability and multiple denial-of-service vulnerabilities.

Remote attackers can exploit these issues to execute arbitrary code in the context of the application or cause denial-of-service conditions.

Wireshark versions 1.4.0 through 1.4.10 and 1.6.0 through 1.6.4 are vulnerable.

Wireshark Buffer Underflow and Denial of Service Vulnerabilities

The following exploits are available:

• /data/vulnerabilities/exploits/51710.zip

Wireshark Buffer Underflow and Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Wireshark Buffer Underflow and Denial of Service Vulnerabilities

References:

• Multiple Wireshark file parser vulnerabilities (Wireshark)
  
• Wireshark 1.4.11 Release Notes (Wireshark)
  
• Wireshark 1.6.5 Release Notes (Wireshark)
  
• Wireshark Homepage (Wireshark)