PT-2013-5282

CVE-2013-4934

·

Published

2013-06-09

·

Updated

2024-06-15

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.8 Wireshark versions 1.10.x through 1.10.0
Description The issue is related to the netmon open function in the Netmon file parser, which does not initialize certain structure members. This allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted packet-trace file.
Recommendations For Wireshark versions 1.8.x through 1.8.8, update to version 1.8.9 or later. For Wireshark versions 1.10.x through 1.10.0, update to version 1.10.1 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2013-4934
CESA-2013_1569
DSA-2734-1
MGASA-2013-0236
OPENSUSE-SU-2024:10199-1
RHSA-2013:1569
RHSA-2013_1569
RHSA-2014:0341
RHSA-2014_0341
SUSE-SU-2015:0426-1
SUSE-SU-2015:0653-1
SUSE-SU-2015:1098-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com