FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-0600

This CVE name corresponds to:

Entered	Topic
2009-03-22	wireshark -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2009-0600 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2009-0600
Phase	Assigned(20090216)

Description

Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame.

References

Source	Reference
BUGTRAQ	20090312 rPSA-2009-0040-1 tshark wireshark
CONFIRM	http://www.wireshark.org/security/wnpa-sec-2009-01.html
CONFIRM	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1937
CONFIRM	http://wiki.rpath.com/Advisories:rPSA-2009-0040
CONFIRM	https://issues.rpath.com/browse/RPL-2984
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm
FEDORA	FEDORA-2009-1877
REDHAT	RHSA-2009:0313
SUSE	SUSE-SR:2009:005
BID	33690
OVAL	oval:org.mitre.oval:def:10853
OVAL	oval:org.mitre.oval:def:15041
SECUNIA	34264
SECUNIA	34344
SECUNIA	34144
VUPEN	ADV-2009-0370
SECTRACK	1021697
SECUNIA	33872