A vulnerability has been identified in Wireshark, which could be exploited by remote attackers to cause a denial of service. This issue is caused by an error in the PCNFSD dissector when processing specially crafted packets, which could be exploited to crash an affected application via a malicious packet.

Affected Products

Wireshark versions 0.8.20 through 1.0.7

Solution

Upgrade to Wireshark version 1.0.8 :
http://www.wireshark.org/download.html

References

http://www.vupen.com/english/advisories/2009/1408
http://www.wireshark.org/security/wnpa-sec-2009-03.html

Credits

Vulnerability reported by the vendor.

Changelog

2009-05-25 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.