ID de Prueba:	1.3.6.1.4.1.25623.1.0.801032
Categoría:	Denial of Service
Título:	Wireshark Multiple Denial Of Service Vulnerabilities (Nov 2009) - Windows
Resumen:	Wireshark is prone to multiple Denial of Service vulnerabilities.
Descripción:	Summary: Wireshark is prone to multiple Denial of Service vulnerabilities. Vulnerability Insight: - An alignment error within the 'dissect_paltalk()' function in epan/dissectors/packet-paltalk.c of the Paltalk dissector that can be exploited to cause a crash. - An off-by-one error within the 'dissect_negprot_response()' function in epan/dissectors/packet-smb.c of the SMB dissector that can be exploited to cause a crash. Vulnerability Impact: Successful exploitation could result in Denial of service condition. Affected Software/OS: Wireshark version 1.2.0 to 1.2.2 on Windows. Solution: Upgrade to Wireshark 1.2.3. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3549 36846 http://www.securityfocus.com/bid/36846 37175 http://secunia.com/advisories/37175 37409 http://secunia.com/advisories/37409 ADV-2009-3061 http://www.vupen.com/english/advisories/2009/3061 http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html http://www.wireshark.org/security/wnpa-sec-2009-07.html https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3689 oval:org.mitre.oval:def:6391 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6391 wireshark-dissectpaltalk-dos(54016) https://exchange.xforce.ibmcloud.com/vulnerabilities/54016 Common Vulnerability Exposure (CVE) ID: CVE-2009-3551 oval:org.mitre.oval:def:6049 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6049 wireshark-negprotresponse-dos(54018) https://exchange.xforce.ibmcloud.com/vulnerabilities/54018
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.