CVE-2007-6114

Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.

🔗 References (56)

• secalert@redhathttp://bugs.gentoo.org/show_bug.cgi?id=199958
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html
• secalert@redhathttp://secunia.com/advisories/27777
• secalert@redhathttp://secunia.com/advisories/27817
• secalert@redhathttp://secunia.com/advisories/28197
• secalert@redhathttp://secunia.com/advisories/28207
• secalert@redhathttp://secunia.com/advisories/28288
• secalert@redhathttp://secunia.com/advisories/28304
• secalert@redhathttp://secunia.com/advisories/28325
• secalert@redhathttp://secunia.com/advisories/28564
• secalert@redhathttp://secunia.com/advisories/28583
• secalert@redhathttp://secunia.com/advisories/29048
• secalert@redhathttp://security.gentoo.org/glsa/glsa-200712-23.xml
• secalert@redhathttp://securitytracker.com/id?1018988
• secalert@redhathttp://wiki.rpath.com/wiki/Advisories:rPSA-2008-0004