ID CVE-2007-6111
Summary Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector.
References
Vulnerable Configurations
  • cpe:2.3:a:ethereal_group:ethereal:0.7.7
    cpe:2.3:a:ethereal_group:ethereal:0.7.7
  • cpe:2.3:a:ethereal_group:ethereal:0.8
    cpe:2.3:a:ethereal_group:ethereal:0.8
  • cpe:2.3:a:ethereal_group:ethereal:0.8.4
    cpe:2.3:a:ethereal_group:ethereal:0.8.4
  • cpe:2.3:a:ethereal_group:ethereal:0.8.5
    cpe:2.3:a:ethereal_group:ethereal:0.8.5
  • cpe:2.3:a:ethereal_group:ethereal:0.8.6
    cpe:2.3:a:ethereal_group:ethereal:0.8.6
  • cpe:2.3:a:ethereal_group:ethereal:0.8.7
    cpe:2.3:a:ethereal_group:ethereal:0.8.7
  • cpe:2.3:a:ethereal_group:ethereal:0.8.8
    cpe:2.3:a:ethereal_group:ethereal:0.8.8
  • cpe:2.3:a:ethereal_group:ethereal:0.8.9
    cpe:2.3:a:ethereal_group:ethereal:0.8.9
  • cpe:2.3:a:ethereal_group:ethereal:0.8.10
    cpe:2.3:a:ethereal_group:ethereal:0.8.10
  • cpe:2.3:a:ethereal_group:ethereal:0.8.11
    cpe:2.3:a:ethereal_group:ethereal:0.8.11
  • cpe:2.3:a:ethereal_group:ethereal:0.8.12
    cpe:2.3:a:ethereal_group:ethereal:0.8.12
  • cpe:2.3:a:ethereal_group:ethereal:0.8.13
    cpe:2.3:a:ethereal_group:ethereal:0.8.13
  • cpe:2.3:a:ethereal_group:ethereal:0.8.14
    cpe:2.3:a:ethereal_group:ethereal:0.8.14
  • cpe:2.3:a:ethereal_group:ethereal:0.8.15
    cpe:2.3:a:ethereal_group:ethereal:0.8.15
  • cpe:2.3:a:ethereal_group:ethereal:0.8.16
    cpe:2.3:a:ethereal_group:ethereal:0.8.16
  • cpe:2.3:a:ethereal_group:ethereal:0.8.17
    cpe:2.3:a:ethereal_group:ethereal:0.8.17
  • cpe:2.3:a:ethereal_group:ethereal:0.8.17a
    cpe:2.3:a:ethereal_group:ethereal:0.8.17a
  • cpe:2.3:a:ethereal_group:ethereal:0.8.18
    cpe:2.3:a:ethereal_group:ethereal:0.8.18
  • cpe:2.3:a:ethereal_group:ethereal:0.8.19
    cpe:2.3:a:ethereal_group:ethereal:0.8.19
  • cpe:2.3:a:ethereal_group:ethereal:0.8.20
    cpe:2.3:a:ethereal_group:ethereal:0.8.20
  • cpe:2.3:a:ethereal_group:ethereal:0.9
    cpe:2.3:a:ethereal_group:ethereal:0.9
  • cpe:2.3:a:ethereal_group:ethereal:0.9.0
    cpe:2.3:a:ethereal_group:ethereal:0.9.0
  • cpe:2.3:a:ethereal_group:ethereal:0.9.1
    cpe:2.3:a:ethereal_group:ethereal:0.9.1
  • cpe:2.3:a:ethereal_group:ethereal:0.9.2
    cpe:2.3:a:ethereal_group:ethereal:0.9.2
  • cpe:2.3:a:ethereal_group:ethereal:0.9.3
    cpe:2.3:a:ethereal_group:ethereal:0.9.3
  • cpe:2.3:a:ethereal_group:ethereal:0.9.4
    cpe:2.3:a:ethereal_group:ethereal:0.9.4
  • cpe:2.3:a:ethereal_group:ethereal:0.9.5
    cpe:2.3:a:ethereal_group:ethereal:0.9.5
  • cpe:2.3:a:ethereal_group:ethereal:0.9.6
    cpe:2.3:a:ethereal_group:ethereal:0.9.6
  • cpe:2.3:a:ethereal_group:ethereal:0.9.7
    cpe:2.3:a:ethereal_group:ethereal:0.9.7
  • cpe:2.3:a:ethereal_group:ethereal:0.9.8
    cpe:2.3:a:ethereal_group:ethereal:0.9.8
  • cpe:2.3:a:ethereal_group:ethereal:0.9.9
    cpe:2.3:a:ethereal_group:ethereal:0.9.9
  • cpe:2.3:a:ethereal_group:ethereal:0.9.10
    cpe:2.3:a:ethereal_group:ethereal:0.9.10
  • cpe:2.3:a:ethereal_group:ethereal:0.9.11
    cpe:2.3:a:ethereal_group:ethereal:0.9.11
  • cpe:2.3:a:ethereal_group:ethereal:0.9.12
    cpe:2.3:a:ethereal_group:ethereal:0.9.12
  • cpe:2.3:a:ethereal_group:ethereal:0.9.13
    cpe:2.3:a:ethereal_group:ethereal:0.9.13
  • cpe:2.3:a:ethereal_group:ethereal:0.9.14
    cpe:2.3:a:ethereal_group:ethereal:0.9.14
  • cpe:2.3:a:ethereal_group:ethereal:0.9.15
    cpe:2.3:a:ethereal_group:ethereal:0.9.15
  • cpe:2.3:a:ethereal_group:ethereal:0.9.16
    cpe:2.3:a:ethereal_group:ethereal:0.9.16
  • cpe:2.3:a:ethereal_group:ethereal:0.9_.0
    cpe:2.3:a:ethereal_group:ethereal:0.9_.0
  • cpe:2.3:a:ethereal_group:ethereal:0.10
    cpe:2.3:a:ethereal_group:ethereal:0.10
  • cpe:2.3:a:ethereal_group:ethereal:0.10.0
    cpe:2.3:a:ethereal_group:ethereal:0.10.0
  • cpe:2.3:a:ethereal_group:ethereal:0.10.0a
    cpe:2.3:a:ethereal_group:ethereal:0.10.0a
  • cpe:2.3:a:ethereal_group:ethereal:0.10.1
    cpe:2.3:a:ethereal_group:ethereal:0.10.1
  • cpe:2.3:a:ethereal_group:ethereal:0.10.2
    cpe:2.3:a:ethereal_group:ethereal:0.10.2
  • cpe:2.3:a:ethereal_group:ethereal:0.10.3
    cpe:2.3:a:ethereal_group:ethereal:0.10.3
  • cpe:2.3:a:ethereal_group:ethereal:0.10.4
    cpe:2.3:a:ethereal_group:ethereal:0.10.4
  • cpe:2.3:a:ethereal_group:ethereal:0.10.5
    cpe:2.3:a:ethereal_group:ethereal:0.10.5
  • cpe:2.3:a:ethereal_group:ethereal:0.10.6
    cpe:2.3:a:ethereal_group:ethereal:0.10.6
  • cpe:2.3:a:ethereal_group:ethereal:0.10.7
    cpe:2.3:a:ethereal_group:ethereal:0.10.7
  • cpe:2.3:a:ethereal_group:ethereal:0.10.8
    cpe:2.3:a:ethereal_group:ethereal:0.10.8
  • cpe:2.3:a:ethereal_group:ethereal:0.10.9
    cpe:2.3:a:ethereal_group:ethereal:0.10.9
  • cpe:2.3:a:ethereal_group:ethereal:0.10.10
    cpe:2.3:a:ethereal_group:ethereal:0.10.10
  • cpe:2.3:a:ethereal_group:ethereal:0.10.11
    cpe:2.3:a:ethereal_group:ethereal:0.10.11
  • cpe:2.3:a:ethereal_group:ethereal:0.10.12
    cpe:2.3:a:ethereal_group:ethereal:0.10.12
  • cpe:2.3:a:ethereal_group:ethereal:0.10.13
    cpe:2.3:a:ethereal_group:ethereal:0.10.13
  • cpe:2.3:a:ethereal_group:ethereal:0.10.14
    cpe:2.3:a:ethereal_group:ethereal:0.10.14
  • cpe:2.3:a:ethereal_group:ethereal:0.99.0
    cpe:2.3:a:ethereal_group:ethereal:0.99.0
  • cpe:2.3:a:wireshark:wireshark:0.7.9
    cpe:2.3:a:wireshark:wireshark:0.7.9
  • cpe:2.3:a:wireshark:wireshark:0.8.16
    cpe:2.3:a:wireshark:wireshark:0.8.16
  • cpe:2.3:a:wireshark:wireshark:0.9.8
    cpe:2.3:a:wireshark:wireshark:0.9.8
  • cpe:2.3:a:wireshark:wireshark:0.9.10
    cpe:2.3:a:wireshark:wireshark:0.9.10
  • cpe:2.3:a:wireshark:wireshark:0.99
    cpe:2.3:a:wireshark:wireshark:0.99
  • cpe:2.3:a:wireshark:wireshark:0.99.0
    cpe:2.3:a:wireshark:wireshark:0.99.0
  • cpe:2.3:a:wireshark:wireshark:0.99.1
    cpe:2.3:a:wireshark:wireshark:0.99.1
  • Wireshark 0.99.2
    cpe:2.3:a:wireshark:wireshark:0.99.2
  • Wireshark 0.99.3
    cpe:2.3:a:wireshark:wireshark:0.99.3
  • Wireshark 0.99.4
    cpe:2.3:a:wireshark:wireshark:0.99.4
  • Wireshark 0.99.5
    cpe:2.3:a:wireshark:wireshark:0.99.5
  • Wireshark 0.99.6
    cpe:2.3:a:wireshark:wireshark:0.99.6
CVSS
Base: 7.1 (as of 26-11-2007 - 21:43)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
nessus via4
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2007-4690.NASL
    description upgrade to 0.99.7 fixes various security flaws. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2016-12-08
    plugin id 29766
    published 2007-12-24
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29766
    title Fedora 7 : wireshark-0.99.7-1.fc7 (2007-4690)
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DSA-1446.NASL
    description Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6450 The RPL dissector could be tricked into an infinite loop. - CVE-2007-6451 The CIP dissector could be tricked into excessive memory allocation.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 29840
    published 2008-01-04
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29840
    title Debian DSA-1446-1 : wireshark - several vulnerabilities
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-200712-23.NASL
    description The remote host is affected by the vulnerability described in GLSA-200712-23 (Wireshark: Multiple vulnerabilities) Multiple buffer overflows and infinite loops were discovered in multiple dissector and parser components, including those for MP3 and NCP (CVE-2007-6111), PPP (CVE-2007-6112), DNP (CVE-2007-6113), SSL and iSeries (OS/400) Communication traces (CVE-2007-6114), ANSI MAP (CVE-2007-6115), Firebird/Interbase (CVE-2007-6116), HTTP (CVE-2007-6117), MEGACO (CVE-2007-6118), DCP ETSI (CVE-2007-6119), Bluetooth SDP (CVE-2007-6120), RPC Portmap (CVE-2007-6121), SMB (CVE-2007-6438), IPv6 amd USB (CVE-2007-6439), WiMAX (CVE-2007-6441), RPL (CVE-2007-6450), CIP (CVE-2007-6451). The vulnerabilities were discovered by Stefan Esser, Beyond Security, Fabiodds, Peter Leeming, Steve and ainsley. Impact : A remote attacker could send specially crafted packets on a network being monitored with Wireshark or entice a user to open a specially crafted file, possibly resulting in the execution of arbitrary code with the privileges of the user running Wireshark (which might be the root user), or a Denial of Service. Workaround : There is no known workaround at this time.
    last seen 2019-02-21
    modified 2018-07-11
    plugin id 29820
    published 2007-12-31
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29820
    title GLSA-200712-23 : Wireshark: Multiple vulnerabilities
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2007-4590.NASL
    description Various flaws fixed by upgrade to 0.99.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2016-12-08
    plugin id 29760
    published 2007-12-24
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=29760
    title Fedora 8 : wireshark-0.99.7-2.fc8 (2007-4590)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2008-0058.NASL
    description Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 43670
    published 2010-01-06
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=43670
    title CentOS 4 / 5 : wireshark (CESA-2008:0058)
  • NASL family Mandriva Local Security Checks
    NASL id MANDRIVA_MDVSA-2008-001.NASL
    description A number of vulnerabilities in the Wireshark program were found that could cause crashes, excessive looping, or arbitrary code execution. This update provides Wireshark 0.99.7 which is not vulnerable to these issues. An updated version of libsmi is also being provided, not because of security issues, but because this version of wireshark uses it instead of net-snmp for SNMP support. Update : This update is being reissued without libcap (kernel capabilities) support, as that is not required by the original released packages, and thus gave trouble for a number of users.
    last seen 2019-02-21
    modified 2018-07-19
    plugin id 36583
    published 2009-04-23
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=36583
    title Mandriva Linux Security Advisory : wireshark (MDVSA-2008:001-1)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2008-0058.NASL
    description Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-11-27
    plugin id 30034
    published 2008-01-21
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=30034
    title RHEL 4 / 5 : wireshark (RHSA-2008:0058)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2008-0058.NASL
    description From Red Hat Security Advisory 2008:0058 : Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata. Users of wireshark should upgrade to these updated packages, which contain Wireshark version 0.99.7, and resolve these issues.
    last seen 2019-02-21
    modified 2018-07-18
    plugin id 67642
    published 2013-07-12
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=67642
    title Oracle Linux 4 / 5 : wireshark (ELSA-2008-0058)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20080121_WIRESHARK_ON_SL3_X.NASL
    description Several flaws were found in Wireshark. Wireshark could crash or possibly execute arbitrary code as the user running Wireshark if it read a malformed packet off the network. (CVE-2007-6112, CVE-2007-6114, CVE-2007-6115, CVE-2007-6117) Several denial of service bugs were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off the network. (CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392, CVE-2007-3392, CVE-2007-3393, CVE-2007-6111, CVE-2007-6113, CVE-2007-6116, CVE-2007-6118, CVE-2007-6119, CVE-2007-6120, CVE-2007-6121, CVE-2007-6438, CVE-2007-6439, CVE-2007-6441, CVE-2007-6450, CVE-2007-6451) As well, Wireshark switched from using net-snmp to libsmi, which is included in this errata.
    last seen 2019-02-21
    modified 2019-01-07
    plugin id 60350
    published 2012-08-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=60350
    title Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64
oval via4
accepted 2013-04-29T04:18:10.193-04:00
class vulnerability
contributors
  • name Aharon Chernin
    organization SCAP.com, LLC
  • name Dragos Prisaca
    organization G2, Inc.
definition_extensions
  • comment The operating system installed on the system is Red Hat Enterprise Linux 4
    oval oval:org.mitre.oval:def:11831
  • comment CentOS Linux 4.x
    oval oval:org.mitre.oval:def:16636
  • comment Oracle Linux 4.x
    oval oval:org.mitre.oval:def:15990
  • comment The operating system installed on the system is Red Hat Enterprise Linux 5
    oval oval:org.mitre.oval:def:11414
  • comment The operating system installed on the system is CentOS Linux 5.x
    oval oval:org.mitre.oval:def:15802
  • comment Oracle Linux 5.x
    oval oval:org.mitre.oval:def:15459
description Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector.
family unix
id oval:org.mitre.oval:def:9048
status accepted
submitted 2010-07-09T03:56:16-04:00
title Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector.
version 24
redhat via4
advisories
rhsa
id RHSA-2008:0058
rpms
  • wireshark-0:0.99.7-1.el4
  • wireshark-gnome-0:0.99.7-1.el4
  • libsmi-0:0.4.5-2.el4
  • libsmi-devel-0:0.4.5-2.el4
  • wireshark-0:0.99.7-1.el5
  • wireshark-gnome-0:0.99.7-1.el5
  • libsmi-0:0.4.5-2.el5
  • libsmi-devel-0:0.4.5-2.el5
refmap via4
bid 26532
bugtraq 20080103 rPSA-2008-0004-1 tshark wireshark
confirm
fedora
  • FEDORA-2007-4590
  • FEDORA-2007-4690
gentoo GLSA-200712-23
mandriva
  • MDVSA-2008:001
  • MDVSA-2008:1
misc http://bugs.gentoo.org/show_bug.cgi?id=199958
sectrack 1018988
secunia
  • 27777
  • 28197
  • 28207
  • 28288
  • 28304
  • 28325
  • 28564
  • 29048
suse SUSE-SR:2008:004
vupen ADV-2007-3956
Last major update 07-03-2011 - 22:01
Published 23-11-2007 - 15:46
Last modified 15-10-2018 - 17:49
Back to Top