FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-6451

This CVE name corresponds to:

Entered Topic
2007-12-19 wireshark -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2007-6451
Phase Assigned(20071219)

Description

Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts of memory.

References

Source Reference
BUGTRAQ 20080103 rPSA-2008-0004-1 tshark wireshark
MISC http://bugs.gentoo.org/show_bug.cgi?id=199958
CONFIRM http://www.wireshark.org/security/wnpa-sec-2007-03.html
CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004
CONFIRM https://issues.rpath.com/browse/RPL-1975
DEBIAN DSA-1446
GENTOO GLSA-200712-23
MANDRIVA MDVSA-2008:001
MANDRIVA MDVSA-2008:1
REDHAT RHSA-2008:0058
REDHAT RHSA-2008:0059
SUSE SUSE-SR:2008:004
BID 27071
OVAL oval:org.mitre.oval:def:9685
SECUNIA 28288
SECUNIA 28315
SECUNIA 27777
SECUNIA 28304
SECUNIA 28325
SECUNIA 28564
SECUNIA 28583
SECUNIA 29048
XF wireshark-cip-dissector-dos(39187)