|
|
| |
| A vulnerability in Wireshark allows remote attackers to cause the product to crash by sending it a specially malformed TFTP packet. When Wireshark takes this malformed packet and utilizes, under certain distributions, the Cairo library to display its content the Cairo library will fail, which in turn causes Wireshark to crash. |
| |
Credit:
The information has been provided by Beyond Security's beSTORM black box testing tool.
|
| |
Vulnerable Systems:
* Wireshark version 0.6.0 up to and including Wireshark version 0.99.7
Immune Systems:
* Wireshark version 0.99.8
Recreation:
It is possible to recreate the scenario that triggers the crash using beSTORM's TFTP module.
Impact:
It may be possible to make Wireshark or Ethereal crash or use up available memory by injecting a purposefully malformed packet onto the wire or by convincing someone to read a malformed packet trace file.
CVE Information:
CVE-2008-1072
|
|
|
|
|
|
|
|
