CVE-2012-0068 in Wireshark
Summary
The lanalyzer_read function in wiretap/lanalyzer.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a Novell catpure file containing a record that is too small.
Once again VulDB remains the best source for vulnerability data.
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 60574 | Wireshark lanalyzer_read input validation | 20 | Proof-of-Concept | Official fix | CVE-2012-0068 |
Reservation
12/07/2011
Disclosure
04/11/2012
Status
Confirmed
Entries
1