4.3

CVE-2009-0600

Exploit
Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wireshark ≫ Wireshark Version0.99.6
Wireshark ≫ Wireshark Version0.99.6a
Wireshark ≫ Wireshark Version0.99.7
Wireshark ≫ Wireshark Version0.99.8
Wireshark ≫ Wireshark Version1.0
Wireshark ≫ Wireshark Version1.0.0
Wireshark ≫ Wireshark Version1.0.1
Wireshark ≫ Wireshark Version1.0.2
Wireshark ≫ Wireshark Version1.0.3
Wireshark ≫ Wireshark Version1.0.4
Wireshark ≫ Wireshark Version1.0.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.79% 0.755
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html
http://secunia.com/advisories/34144
http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm
http://www.redhat.com/support/errata/RHSA-2009-0313.html
http://secunia.com/advisories/33872
Vendor Advisory
http://secunia.com/advisories/34264
http://secunia.com/advisories/34344
http://wiki.rpath.com/Advisories:rPSA-2009-0040
http://www.securityfocus.com/archive/1/501763/100/0/threaded
http://www.securityfocus.com/bid/33690
Exploit
http://www.securitytracker.com/id?1021697
http://www.vupen.com/english/advisories/2009/0370
http://www.wireshark.org/security/wnpa-sec-2009-01.html
Vendor Advisory
https://issues.rpath.com/browse/RPL-2984
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1937
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10853
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15041