The host is installed with Wireshark and is prone to Denial of Service and buffer overflow vulnerabilities.

Successful exploitation could allow attackers to overflow a buffer and execute arbitrary code on the system or cause the application to crash. Impact Level: Application

Upgrade to the Wireshark version 1.4.5 or later, For updates refer to http://www.wireshark.org/download.html

The flaws are due to: - a buffer overflow error in the 'DECT' dissector when processing malformed data, which could allow code execution via malformed packets or a malicious PCAP file. - an error in the 'NFS' dissector when processing malformed data, which could be exploited to crash an affected application.

Wireshark version 1.4.0 through 1.4.4

• http://secunia.com/advisories/44172
• http://www.vupen.com/english/advisories/2011/1022
• http://www.wireshark.org/security/wnpa-sec-2011-06.html
• http://xforce.iss.net/xforce/xfdb/66834

---

Updated on 2015-03-25