Summary
The host is installed with Wireshark and is prone to denial of service vulnerability.
Impact
Successful exploitation could allow attackers to cause a denial of service via a crafted .pcap file.
Impact Level: Application
Solution
Upgrade to the Wireshark version 1.4.5 or 1.2.16 or later, For updates refer to http://www.wireshark.org/download.html
Insight
The flaw is caused by an error in the 'X.509if' dissector when processing malformed data, which could be exploited to crash an affected application.
Affected
Wireshark version 1.2.0 through 1.2.15
Wireshark version 1.4.0 through 1.4.4
References
Severity
Classification
-
CVE CVE-2011-1590 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P
Related Vulnerabilities
- Apache Input Header Folding and mod_ssl ssl_io_filter_cleanup DoS Vulnerabilities
- Comodo Internet Security Denial of Service Vulnerability-02
- Adobe Reader 'AcroPDF.DLL' Denial of Service Vulnerability (Mac OS X)
- ejabberd XML Parsing Denial of Service Vulnerability (Windows)
- freeSSHd Pre-Authentication Error Remote DoS Vulnerability