CVE-2007-3389: Input Validation
Published Jun 26, 2007
·Updated
Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.
Affected Software
6 affected components
Wireshark Wireshark=0.99.3
Wireshark Wireshark=0.99.0
Wireshark Wireshark=0.99.2
Wireshark Wireshark=0.99.1
Wireshark Wireshark=0.99.5
Wireshark Wireshark=0.99.4
Event History
Jun 26, 2007
CVE Published
12:30 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3389?
CVE-2007-3389 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2007-3389?
To fix CVE-2007-3389, you should upgrade to Wireshark version 0.99.6 or later.
3
What causes the CVE-2007-3389 vulnerability?
CVE-2007-3389 is caused by a crafted chunked encoding in an HTTP response that leads to a crash.
4
Which versions of Wireshark are affected by CVE-2007-3389?
Wireshark versions 0.99.0 through 0.99.5 are affected by CVE-2007-3389.
5
Can CVE-2007-3389 be exploited remotely?
Yes, CVE-2007-3389 can be exploited remotely by attackers sending crafted HTTP responses.