I'n Blog 之萬象真藏

Secunia Advisory:	SA29569
Release Date:	2008-03-28
Critical:	Moderately critical
Impact:	DoS
Where:	From remote
Solution Status:	Unpatched
Software:	Wireshark 1.x

Description:
Some vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerabilities are caused due to errors in the X.509sat, Roofnet, LDAP, and SCCP dissectors. These can be exploited to cause the application to crash when processing specially crafted packets that are either captured off the wire or loaded via a capture file.

The vulnerabilities are reported in various versions prior to 1.0.0.

Solution:
Fixed in an upcoming version 1.0.0.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://www.wireshark.org/security/wnpa-sec-2008-02.html

資料來源 http://secunia.com/advisories/29569/