FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

wireshark -- Multiple problems

Affected packages
0.8.20	<=	ethereal	<	0.99.6
0.8.20	<=	ethereal-lite	<	0.99.6
0.8.20	<=	tethereal	<	0.99.6
0.8.20	<=	tethereal-lite	<	0.99.6
0.8.20	<=	wireshark	<	0.99.6
0.8.20	<=	wireshark-lite	<	0.99.6

Details

VuXML ID	7fadc049-2ba0-11dc-9377-0016179b2dd5
Discovery	2007-06-29
Entry	2007-07-06
Modified	2010-05-12

wireshark Team reports:

It may be possible to make Wireshark or Ethereal crash or use up available memory by injecting a purposefully malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

[source]

References

CVE Name	CVE-2007-3389
CVE Name	CVE-2007-3390
CVE Name	CVE-2007-3391
CVE Name	CVE-2007-3392
CVE Name	CVE-2007-3393
URL	http://secunia.com/advisories/25833/
URL	http://www.wireshark.org/security/wnpa-sec-2007-02.html