Summary
This host is installed with Wireshark and is prone to denial of service vulnerability.
Impact
Successful exploitation will allow attackers to crash the application.
Impact Level: Application
Solution
Upgrade to Wireshark 1.4.2 or later.
For updates refer to http://www.wireshark.org/download
Insight
The flaw is due to an error in 'epan/dissectors/packet-zbee-zcl.c' in the ZigBee ZCL dissector, which allows remote attackers to cause a denial of service (infinite loop) via a crafted ZCL packet.
Affected
Wireshark version 1.4.0 to 1.4.1
References
Severity
Classification
-
CVE CVE-2010-4301 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities
- Cherokee POST request DoS
- Adobe Flash Media Server Remote Denial of Service Vulnerability (August-2011)
- ClamAV 'cli_pdf()' and 'cli_scanicon()' Denial of Service Vulnerabilities (Win
- ClamAV 'cli_pdf()' PDF File Processing Denial Of Service Vulnerability
- Denial of Service vulnerability in AVG Anti-Virus (Linux)