CVE-2008-4682: Input Validation
wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a malformed Tamos CommView capture file (aka .ncf file) with an "unknown/unexpected packet type" that triggers a failed assertion.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4682?
CVE-2008-4682 has a severity rating that indicates it can allow remote attackers to cause a denial of service in the affected Wireshark versions.
How do I fix CVE-2008-4682?
To fix CVE-2008-4682, upgrade to a Wireshark version that is later than 1.0.3 or 0.99.8 to ensure the vulnerability is patched.
Which versions of Wireshark are affected by CVE-2008-4682?
CVE-2008-4682 affects Wireshark versions 0.99.7 through 1.0.3.
What type of vulnerability is CVE-2008-4682?
CVE-2008-4682 is classified as a denial of service vulnerability triggered by malformed Tamos CommView capture files.
Can CVE-2008-4682 be exploited by local users?
CVE-2008-4682 can primarily be exploited by remote attackers through the use of specially crafted .ncf files.