CVE-2012-0042: Null Pointer Dereference
Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet, related to epan/tostr.c.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0042?
CVE-2012-0042 is rated as a high severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2012-0042?
To fix CVE-2012-0042, upgrade Wireshark to version 1.4.11 or later for 1.4.x and to version 1.6.5 or later for 1.6.x.
What types of attacks can exploit CVE-2012-0042?
CVE-2012-0042 can be exploited by remote attackers sending crafted packets that lead to application crashes.
Which versions of Wireshark are affected by CVE-2012-0042?
Wireshark versions 1.4.0 to 1.4.10 and 1.6.0 to 1.6.4 are vulnerable to CVE-2012-0042.
What is the impact of CVE-2012-0042 on affected systems?
The impact of CVE-2012-0042 is a denial of service which can crash the Wireshark application.