This host is installed with Wireshark and is prone to denial of service vulnerability.

Successful exploitation will allow attackers to crash the application. Impact Level: Application

Upgrade to Wireshark 1.4.2 or later, For updates refer to http://www.wireshark.org/download

The flaw is due to error in 'epan/dissectors/packet-zbee-zcl.c' in the ZigBee ZCL dissector, which allows remote attackers to cause a denial of service (infinite loop) via a crafted ZCL packet.

Wireshark version 1.4.0 to 1.4.1

• http://secunia.com/advisories/42290
• http://www.vupen.com/english/advisories/2010/3038
• http://www.wireshark.org/security/wnpa-sec-2010-14.html

---

Updated on 2015-03-25