Vulnerability Details : CVE-2009-0600
Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame.
Vulnerability category: Input validationDenial of service
Products affected by CVE-2009-0600
- cpe:2.3:a:wireshark:wireshark:0.99.6:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:0.99.7:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:0.99.8:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:0.99.6a:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2009-0600
0.64%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 79 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-0600
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2009-0600
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-0600
-
http://www.securityfocus.com/bid/33690
Exploit
-
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html
[security-announce] SUSE Security Summary Report: SUSE-SR:2009:005 - openSUSE Security Announce - openSUSE Mailing Lists
-
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1937
K12 capture file format errors (#1937) · Issues · Wireshark Foundation / Wireshark · GitLabVendor Advisory
-
http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm
ASA-2009-082 (RHSA-2009-0313)
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10853
404 Not Found
-
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html
[SECURITY] Fedora 9 Update: wireshark-1.0.6-1.fc9
-
http://wiki.rpath.com/Advisories:rPSA-2009-0040
-
http://www.securityfocus.com/archive/1/501763/100/0/threaded
-
http://www.redhat.com/support/errata/RHSA-2009-0313.html
Support
-
http://www.wireshark.org/security/wnpa-sec-2009-01.html
Wireshark • wnpa-sec-2009-01 Multiple problems in WiresharkVendor Advisory
-
https://issues.rpath.com/browse/RPL-2984
-
http://www.vupen.com/english/advisories/2009/0370
Webmail: access your OVH emails on ovhcloud.com | OVHcloud UK
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15041
404 Not Found
-
http://www.securitytracker.com/id?1021697
GoDaddy Domain Name Search
Jump to