CVE-2009-3550: Null Pointer Dereference
The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party information.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3550?
CVE-2009-3550 has been classified as a denial of service vulnerability due to a NULL pointer dereference in Wireshark.
How do I fix CVE-2009-3550?
To fix CVE-2009-3550, update Wireshark to a version later than 1.2.2 or 1.0.9.
Which versions of Wireshark are affected by CVE-2009-3550?
CVE-2009-3550 affects Wireshark versions 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2.
What kind of attack does CVE-2009-3550 allow?
CVE-2009-3550 allows remote attackers to exploit the vulnerability to cause an application crash.
Is CVE-2009-3550 a critical vulnerability?
CVE-2009-3550 is not considered critical but poses a risk since it can lead to denial of service affecting application availability.