CVE-2009-0599: Buffer Overflow
Published Feb 16, 2009
·Updated
Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file.
Affected Software
9 affected components
Wireshark Wireshark=0.99.8
Wireshark Wireshark=1.0.1
Wireshark Wireshark=1.0
Wireshark Wireshark=1.0.2
Wireshark Wireshark=1.0.4
Wireshark Wireshark=1.0.3
Wireshark Wireshark=1.0.5
Wireshark Wireshark=1.0.0
Wireshark Wireshark=0.99.7
Remediation
Patch Available
Event History
Feb 16, 2009
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0599?
CVE-2009-0599 has a medium severity level as it can lead to denial of service through application crashes.
2
How do I fix CVE-2009-0599?
To fix CVE-2009-0599, upgrade Wireshark to version 1.0.6 or later.
3
Which versions of Wireshark are affected by CVE-2009-0599?
Versions of Wireshark from 0.99.7 to 1.0.5 are affected by CVE-2009-0599.
4
What type of attack does CVE-2009-0599 facilitate?
CVE-2009-0599 facilitates a user-assisted remote attack that can cause denial of service.
5
Can CVE-2009-0599 be exploited without user interaction?
No, CVE-2009-0599 requires user interaction to be exploited.