Vulnerability CVE-2008-4684: Information

Description

packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service (application crash) via a certain series of packets, as demonstrated by enabling the (1) PRP or (2) MATE post dissector.

Severity: MEDIUM (4.3)

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:0.99.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:0.99.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:0.99.5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:0.99.4:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*

      ---