wireshark

• Author: voroskoi
• Vulnerable: 0.99.4-1siwenna1
• Unaffected: 0.99.5-1siwenna1

Some vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service). Errors within the TCP, HTTP, IEEE 802.11, and LLT parsers can be exploited to cause a crash or consume large amounts of memory when parsing a specially crafted packet that is either captured off the wire or loaded via a capture file.

• Bug Tracker URL: http://bugs.frugalware.org/task/1684

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0456
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0457
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0458
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0459