wireshark

• Author: Miklos Vajna
• Vulnerable: 1.0.4-1solaria1
• Unaffected: 1.0.5-1solaria1

Two vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service).

1. An error in the SMTP dissector can be exploited to trigger the execution of an infinite loop via a large SMTP packet.
2. An error in the WLCCP dissector can be exploited to trigger the execution of an infinite loop via a specially crafted packet.

• Bug Tracker URL: http://bugs.frugalware.org/task/3514

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5285