CVEvulnerability

CVE-2009-3550

4.3 MEDIUM Published 2009-10-30 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2009-10-30
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P

Description

The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party information.

Affected configurations

• wireshark wireshark 0.10.2 • wireshark wireshark 0.10.3 • wireshark wireshark 0.10.4 • wireshark wireshark 0.10.5 • wireshark wireshark 0.10.6 • wireshark wireshark 0.10.7 • wireshark wireshark 0.10.8 • wireshark wireshark 0.10.9 • wireshark wireshark 0.10.10 • wireshark wireshark 0.10.11 • wireshark wireshark 0.10.12 • wireshark wireshark 0.10.13 • wireshark wireshark 0.10.14 • wireshark wireshark 1.0 • wireshark wireshark 1.0.0 • wireshark wireshark 1.0.1 • wireshark wireshark 1.0.2 • wireshark wireshark 1.0.3 • wireshark wireshark 1.0.4 • wireshark wireshark 1.0.5 • wireshark wireshark 1.0.6 • wireshark wireshark 1.0.7 • wireshark wireshark 1.0.8 • wireshark wireshark 1.0.9 • wireshark wireshark 1.2 • wireshark wireshark 1.2.0 • wireshark wireshark 1.2.1 • wireshark wireshark 1.2.2

References

http://secunia.com/advisories/37175 Vendor Advisory
http://secunia.com/advisories/37409 secunia.com
http://secunia.com/advisories/37477 secunia.com
http://www.debian.org/security/2009/dsa-1942 www.debian.org
http://www.securityfocus.com/bid/36846 www.securityfocus.com
http://www.vupen.com/english/advisories/2009/3061 Patch, Vendor Advisory
http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html Patch, Vendor Advisory
http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html Patch, Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2009-07.html Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2009-08.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54017 exchange.xforce.ibmcloud.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10103 oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6005 oval.cisecurity.org
http://secunia.com/advisories/37175 Vendor Advisory
http://secunia.com/advisories/37409 secunia.com
http://secunia.com/advisories/37477 secunia.com
http://www.debian.org/security/2009/dsa-1942 www.debian.org
http://www.securityfocus.com/bid/36846 www.securityfocus.com
http://www.vupen.com/english/advisories/2009/3061 Patch, Vendor Advisory
http://www.wireshark.org/docs/relnotes/wireshark-1.0.10.html Patch, Vendor Advisory
http://www.wireshark.org/docs/relnotes/wireshark-1.2.3.html Patch, Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2009-07.html Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2009-08.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54017 exchange.xforce.ibmcloud.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10103 oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6005 oval.cisecurity.org