CVE-2009-0600: Input Validation
Published Feb 16, 2009
·Updated
Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame.
Affected Software
11 affected components
Wireshark Wireshark=0.99.8
Wireshark Wireshark=1.0.1
Wireshark Wireshark=1.0
Wireshark Wireshark=0.99.6
Wireshark Wireshark=1.0.2
Wireshark Wireshark=1.0.4
Wireshark Wireshark=1.0.3
Wireshark Wireshark=1.0.5
Wireshark Wireshark=1.0.0
Wireshark Wireshark=0.99.6a
Wireshark Wireshark=0.99.7
Event History
Feb 16, 2009
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0600?
CVE-2009-0600 is classified as a moderate severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2009-0600?
To fix CVE-2009-0600, you should update Wireshark to version 1.0.6 or later, which contains the necessary patches.
3
Which versions of Wireshark are affected by CVE-2009-0600?
CVE-2009-0600 affects Wireshark versions 0.99.6 through 1.0.5.
4
What type of attack does CVE-2009-0600 enable?
CVE-2009-0600 enables user-assisted remote attackers to cause a denial of service by crashing the application.
5
Is CVE-2009-0600 a remote vulnerability?
Yes, CVE-2009-0600 is considered a remote vulnerability as it can be exploited by remote attackers with user assistance.