Test Kennung:	1.3.6.1.4.1.25623.1.0.801032
Kategorie:	Denial of Service
Titel:	Wireshark Multiple Denial Of Service Vulnerabilities (Nov 2009) - Windows
Zusammenfassung:	Wireshark is prone to multiple Denial of Service vulnerabilities.
Beschreibung:	Summary: Wireshark is prone to multiple Denial of Service vulnerabilities. Vulnerability Insight: - An alignment error within the 'dissect_paltalk()' function in epan/dissectors/packet-paltalk.c of the Paltalk dissector that can be exploited to cause a crash. - An off-by-one error within the 'dissect_negprot_response()' function in epan/dissectors/packet-smb.c of the SMB dissector that can be exploited to cause a crash. Vulnerability Impact: Successful exploitation could result in Denial of service condition. Affected Software/OS: Wireshark version 1.2.0 to 1.2.2 on Windows. Solution: Upgrade to Wireshark 1.2.3. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3549 36846 http://www.securityfocus.com/bid/36846 37175 http://secunia.com/advisories/37175 37409 http://secunia.com/advisories/37409 ADV-2009-3061 http://www.vupen.com/english/advisories/2009/3061 http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html http://www.wireshark.org/security/wnpa-sec-2009-07.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3689 oval:org.mitre.oval:def:6391 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6391 wireshark-dissectpaltalk-dos(54016) https://exchange.xforce.ibmcloud.com/vulnerabilities/54016 Common Vulnerability Exposure (CVE) ID: CVE-2009-3551 oval:org.mitre.oval:def:6049 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6049 wireshark-negprotresponse-dos(54018) https://exchange.xforce.ibmcloud.com/vulnerabilities/54018
Copyright	Copyright (C) 2009 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.