Vulnerability CVE-2007-0459: Information

Description

packet-tcp.c in the TCP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service (application crash or hang) via fragmented HTTP packets.

Severity: MEDIUM (5.0)

URL: https://nvd.nist.gov/vuln/detail/CVE-2007-0459
Published: Feb. 2, 2007
Modified: Oct. 11, 2017

References to Advisories, Solutions, and Tools

Hyperlink
Resource
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1200
  • Exploit
  • Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2007-01.html
  • Patch
  • Vendor Advisory
22352
  • Patch
  • Vendor Advisory
24016
  • Patch
  • Vendor Advisory
https://issues.rpath.com/browse/RPL-985
    FEDORA-2007-207
      MDKSA-2007:033
        RHSA-2007:0066
          1017581
            24011
              24025
                24084
                  24515
                    20070301-01-P
                      24650
                      • Vendor Advisory
                      http://support.avaya.com/elmodocs2/security/ASA-2007-166.htm
                        24970
                        • Vendor Advisory
                        ADV-2007-0443
                          wireshark-tcpdissector-dos(32053)
                            oval:org.mitre.oval:def:14875
                              oval:org.mitre.oval:def:10465

                                  1. Configuration 1

                                    cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*
                                    cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*
                                    cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*
                                VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                                Version: v24.5.3
                                Back to top