This host is installed with Wireshark and is prone to Denial of Service vulnerability.

Successful exploitation will allow the attackers to crash an affected application. Impact Level: Application

Upgrade to Wireshark version 1.0.14 or 1.2.9: For updates refer to http://www.wireshark.org/download.html

The flaw is caused by an off-by-one error within the SigComp Universal Decompressor Virtual Machine, which could be exploited by attackers to crash an affected application or execute arbitrary code via unknown vectors.

Wireshark version 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8

• http://secunia.com/advisories/40112
• http://www.openwall.com/lists/oss-security/2010/06/11/1
• http://www.vupen.com/english/advisories/2010/1418
• http://www.wireshark.org/security/wnpa-sec-2010-05.html
• http://www.wireshark.org/security/wnpa-sec-2010-06.html

---

Updated on 2015-03-25