FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

wireshark -- LWRES vulnerability

Affected packages
	wireshark	<	1.2.6
	wireshark-lite	<	1.2.6

Details

VuXML ID	bb0a8795-15dc-11df-bf0a-002170daae37
Discovery	2010-01-27
Entry	2010-02-10

Wireshark project reports:

Babi discovered several buffer overflows in the LWRES dissector.

It may be possible to make Wireshark crash remotely or by convincing someone to read a malformed packet trace file.

[source]

References

CVE Name	CVE-2010-0304
URL	http://secunia.com/advisories/38257/
URL	http://www.wireshark.org/security/wnpa-sec-2010-02.html