Wireshark was updated to version 1.4.4 to fix several security issues

The installed version of Wireshark or Ethereal is potentially affected by multiple vulnerabilities. 

 - The SMB dissector can be affected by a NULL pointer    dereference. (Bug 4734)

 - The ANS.1 BER dissector can be affected by a buffer    overflow.

 - The SMB PIPE dissector can be affected by a NULL pointer    dereference on some platforms.

 - The SigComp Universal Decompressor Virtual Machine can    be affected by an infinite loop or a buffer overflow.
   (Bug 4826, 4837)

The remote host is affected by the vulnerability described in GLSA-201110-02 (Wireshark: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Wireshark. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could send specially crafted packets on a network       being monitored by Wireshark, entice a user to open a malformed packet       trace file using Wireshark, or deploy a specially crafted Lua script for       use by Wireshark, possibly resulting in the execution of arbitrary code,       or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Wireshark version 1.4.2 fixes several security issues that allowed attackers to crash wireshark or potentially even execute arbitrary code

(CVE-2010-1455, CVE-2010-2283, CVE-2010-2284, CVE-2010-2285, CVE-2010-2286, CVE-2010-2287, CVE-2010-2992, CVE-2010-2993, CVE-2010-2994, CVE-2010-2995, CVE-2010-3445, CVE-2010-4300, CVE-2010-4301)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
53315	SuSE 11.1 Security Update : wireshark (SAT Patch Number 4267)	Nessus	SuSE Local Security Checks	2011/4/7	2021/1/19	critical
46864	Wireshark / Ethereal < 1.0.14 / 1.2.9 Multiple Vulnerabilities	Nessus	Windows	2010/6/11	2026/3/30	high
56426	GLSA-201110-02 : Wireshark: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2011/10/10	2021/1/6	critical
75771	openSUSE Security Update : wireshark (openSUSE-SU-2011:0010-2)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	critical

检测

插件搜索

critical

high

critical

critical