Wireshark MPEG DSM-CC Dissector 'packet-mpeg-dsmcc.c' Denial of Service Vulnerability

Bugtraq ID:	59999
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-3560
Remote:	Yes
Local:	No
Published:	May 17 2013 12:00AM
Updated:	Apr 13 2015 09:40PM
Credit:	Wireshark
Vulnerable:	SuSE openSUSE 11.4 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Wireshark MPEG DSM-CC Dissector 'packet-mpeg-dsmcc.c' Denial of Service Vulnerability

Wireshark is prone to a denial-of-service vulnerability.

An attacker can leverage this issue to crash the affected application, denying service to legitimate users.

Wireshark 1.8.0 through versions 1.8.6 are vulnerable.

Wireshark MPEG DSM-CC Dissector 'packet-mpeg-dsmcc.c' Denial of Service Vulnerability

A sample packet trace file is available in the Wireshark bug report. Please see the references for more information.
[email protected]

Wireshark MPEG DSM-CC Dissector 'packet-mpeg-dsmcc.c' Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Wireshark MPEG DSM-CC Dissector 'packet-mpeg-dsmcc.c' Denial of Service Vulnerability

References:

• Wireshark Homepage (Wireshark)