Summary
This host is installed with Wireshark and is prone to multiple vulnerabilities.
Impact
Successful exploitation will allow attackers to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
Impact Level: System/Application
Solution
Upgrade to Wireshark version 1.8.10 or 1.10.2 or later, For updates refer to http://www.wireshark.org/download
Insight
Multiple flaws are due to error in,
- ASSA R3 dissector (dissectors/packet-assa_r3.c)
- NBAP dissector (dissectors/packet-nbap.c)
- RTPS dissector (dissectors/packet-rtsp.c)
- LDAP dissector (dissectors/packet-ldap.c)
- MQ dissector (dissectors/packet-mq.c)
- Netmon file parser (wiretap/netmon.c)
Affected
Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 on Mac OS X
Detection
Get the installed version with the help of detect NVT and check the version is vulnerable or not.
References
Severity
Classification
-
CVE CVE-2013-5718, CVE-2013-5719, CVE-2013-5720, CVE-2013-5721, CVE-2013-5722 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities
- AVG Anti-Virus 'hcp://' Protocol Handler Remote Code Execution Vulnerability
- Adobe Flash Media Server Video Stream Capture Security Issue
- Avant Browser Address Bar Spoofing Vulnerability
- Adobe Digital Edition Information Disclosure Vulnerability (Mac OS X)
- Apache Tomcat XML External Entity Information Disclosure Vulnerability