wnpa-sec-2008-05 · Multiple problems in Wireshark
Summary
Name: Multiple problems in Wireshark
Docid: wnpa-sec-2008-05
Date: September 3, 2008
Affected versions: 0.9.7 up to and including 1.0.2
Fixed versions: 1.0.3
Details
Description
Wireshark 1.0.3 fixes the following vulnerabilities:
-
The NCP dissector was susceptible to a number of problems, including
buffer overflows and an infinite loop.
(Bug
)
Versions affected: 0.9.7 to 1.0.2- Wireshark could crash while uncompressing zlib-compressed packet data. (Bug
)
Versions affected: 0.10.14 to 1.0.2- Wireshark could crash while reading a Tektronix .rf5 file.
Versions affected: 0.99.6 to 1.0.2 - Wireshark could crash while uncompressing zlib-compressed packet data. (Bug
Impact
It may be possible to make Wireshark crash by injecting a series of malformed packets onto the wire or by convincing someone to read a malformed packet trace file.
Resolution
Upgrade to Wireshark 1.0.3 or later. Due to the nature of these bugs, there is no workaround for previous versions.