J. Oquendo

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 0.99.6 through 1.0.13 Wireshark versions 1.2.0 through 1.2.8 **Description** The issue allows remote attackers to cause a denial of service via unknown vectors, resulting in a NULL pointer dereference. **Recommendations** For Wireshark versions 0.99.6 through 1.0.13, update to a version outside of this range to resolve the issue. For Wireshark versions 1.2.0 through 1.2.8, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the SMB dissector until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 0.10.13 through 1.0.13 Wireshark versions 1.2.0 through 1.2.8 **Description** The issue is related to a buffer overflow in the ASN.1 BER dissector, which allows remote attackers to impact the system. **Recommendations** For Wireshark versions 0.10.13 through 1.0.13, update to a version outside of this range to resolve the issue. For Wireshark versions 1.2.0 through 1.2.8, update to a version outside of this range to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 0.10.7 through 1.0.13 Wireshark versions 1.2.0 through 1.2.8 **Description** The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via unknown vectors. This is related to the SigComp Universal Decompressor Virtual Machine dissector in Wireshark. **Recommendations** For Wireshark versions 0.10.7 through 1.0.13, update to a version outside of this range to resolve the issue. For Wireshark versions 1.2.0 through 1.2.8, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling the SigComp Universal Decompressor Virtual Machine dissector until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 0.10.8 through 1.0.13 Wireshark versions 1.2.0 through 1.2.8 **Description** The issue is related to a buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector. This allows remote attackers to impact the system. **Recommendations** For Wireshark versions 0.10.8 through 1.0.13, update to a version outside of this range to resolve the issue. For Wireshark versions 1.2.0 through 1.2.8, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling the SigComp Universal Decompressor Virtual Machine dissector until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows NT 4.0 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Small Business Server 2003 **Description** The issue allows remote attackers to cause a denial of service, specifically an IP stack hang, by sending a continuous stream of packets on TCP port 135 with incorrect TCP header checksums and random numbers in certain TCP header fields. This can be demonstrated using the Achilles Windows Attack Tool. However, Microsoft's investigation, which included code review and attempts to reproduce the issue on multiple fresh installs of various Windows Operating Systems, did not confirm the issue. **Recommendations** For Microsoft Windows NT 4.0, consider restricting access to TCP port 135 as a temporary workaround. For Microsoft Windows 2000, consider restricting access to TCP port 135 as a temporary workaround. For Microsoft Windows XP, consider restricting access to TCP port 135 as a temporary workaround. For Microsoft Windows Small Business Server 2003, consider restricting access to TCP port 135 as a temporary workaround. At the moment, there is no information about a newer version that contains a fix for this vulnerability.