Wireshark is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in a heap overflow. With a specially crafted request, a remote attacker can potentially cause a denial of service.
Classification
Location:
Remote / Network Access,
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Solution:
Workaround,
Upgrade
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
Solution
Upgrade to version 1.4.2 or 1.2.13 or higher, as it has been reported to fix this vulnerability. It is also possible to temporarily work around the flaw by implementing the following workaround:
Disable the LDSS dissector:
* Select Analyze→Enabled Protocols... from the menu.
* Make sure "LDSS" is un-checked.
* Click "Save", then click "OK".
