CVE-2012-3825: Integer Overflow
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) BACapp and (2) Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3825?
CVE-2012-3825 is classified as a denial of service vulnerability that can result from multiple integer overflows.
How do I fix CVE-2012-3825?
To mitigate CVE-2012-3825, you should upgrade Wireshark to version 1.4.13 or 1.6.8 or later.
What versions of Wireshark are affected by CVE-2012-3825?
CVE-2012-3825 affects Wireshark versions 1.4.0 through 1.4.12 and 1.6.0 through 1.6.7.
What types of attacks are possible due to CVE-2012-3825?
Exploiting CVE-2012-3825 can lead to a denial of service through an infinite loop in the BACapp and Bluetooth HCI dissectors.
Is CVE-2012-3825 a critical vulnerability?
While not classified as critical, CVE-2012-3825 poses risks to system availability due to its denial of service nature.