CVE-2007-6439: Medium severity Wireshark Wireshark vulnerability

Published Dec 19, 2007

Updated

Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite or large loop) via the (1) IPv6 or (2) USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by CVE-2007-6116. The DCP ETSI issue is already covered by CVE-2007-6119.

Affected Software

1 affected component

Wireshark Wireshark=0.99.6

Event History

Dec 19, 2007

CVE Published

10:46 PM

Dec 20, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-6439?

CVE-2007-6439 is classified as a denial of service vulnerability due to potential infinite loops in the Wireshark dissectors.

How do I fix CVE-2007-6439?

To fix CVE-2007-6439, upgrade to a later version of Wireshark beyond 0.99.6 where the issue has been addressed.

Who is affected by CVE-2007-6439?

Users of Wireshark version 0.99.6 are affected by CVE-2007-6439.

What types of attacks are possible with CVE-2007-6439?

CVE-2007-6439 can allow remote attackers to cause resource exhaustion leading to denial of service.

Is CVE-2007-6439 related to specific dissectors?

Yes, CVE-2007-6439 specifically involves vulnerabilities in the IPv6 and USB dissectors.