CVE-2012-1595: Medium severity Wireshark Wireshark vulnerability

Published Apr 11, 2012

Updated

The pcapprocesspseudoheader function in wiretap/pcap-common.c in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (application crash) via a WTAPENCAPERF file containing an Extension or Multi-Channel header with an invalid pseudoheader size, related to the pcap and pcap-ng file parsers.

Affected Software

18 affected components

Wireshark Wireshark=1.4.0

Wireshark Wireshark=1.4.1

Wireshark Wireshark=1.4.2

Wireshark Wireshark=1.4.3

Wireshark Wireshark=1.4.4

Wireshark Wireshark=1.4.5

Wireshark Wireshark=1.4.6

Wireshark Wireshark=1.4.7

Wireshark Wireshark=1.4.8

Wireshark Wireshark=1.4.9

Wireshark Wireshark=1.4.10

Wireshark Wireshark=1.4.11

Wireshark Wireshark=1.6.0

Wireshark Wireshark=1.6.1

Wireshark Wireshark=1.6.2

Wireshark Wireshark=1.6.3

Wireshark Wireshark=1.6.4

Wireshark Wireshark=1.6.5

Event History

Apr 11, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-1595?

CVE-2012-1595 is classified as a denial of service vulnerability that can cause application crashes.

How do I fix CVE-2012-1595?

To fix CVE-2012-1595, upgrade Wireshark to version 1.4.12 or 1.6.6 or later.

What versions of Wireshark are affected by CVE-2012-1595?

CVE-2012-1595 affects Wireshark versions 1.4.0 to 1.4.11 and versions 1.6.0 to 1.6.5.

What type of attack does CVE-2012-1595 allow?

CVE-2012-1595 allows remote attackers to perform a denial of service attack on the application.

Where can I find more information about CVE-2012-1595?

More information regarding CVE-2012-1595 can typically be found in Wireshark's release notes and security advisories.