Summary
The host is installed with Wireshark and is prone to denial of service vulnerability.
Impact
Successful exploitation could allow remote attackers to cause a denial of service via vectors involving self-referential ASN.1 CHOICE values.
Impact Level: System/Application
Solution
Upgrade to version 1.4.4-1 or later,
For updates refer to http://www.wireshark.org/download.html
Insight
The flaw is due to stack consumption vulnerability in the 'dissect_ber_choice function' in the 'BER dissector'.
Affected
Wireshark version 1.2.0 through 1.2.15
Wireshark version 1.4.0 through 1.4.4
References
Severity
Classification
-
CVE CVE-2011-1142 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities