[ GLSA 201110-02 ] Wireshark: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Wireshark: Multiple vulnerabilities (GLSA 201110-02)
Severity: normal
Exploitable: local, remote
Date: October 09, 2011
Bug(s): #323859, #330479, #339401, #346191, #350551, #354197, #357237, #363895, #369683, #373961, #381551, #383823, #386179
ID: 201110-02

Synopsis

Multiple vulnerabilities in Wireshark allow for the remote
execution of arbitrary code, or a Denial of Service condition.


Background

Wireshark is a versatile network protocol analyzer.

Affected Packages

Package: net-analyzer/wireshark
Vulnerable: < 1.4.9
Unaffected: >= 1.4.9
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Wireshark. Please
review the CVE identifiers referenced below for details.


Impact

A remote attacker could send specially crafted packets on a network
being monitored by Wireshark, entice a user to open a malformed packet
trace file using Wireshark, or deploy a specially crafted Lua script for
use by Wireshark, possibly resulting in the execution of arbitrary code,
or a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Wireshark users should upgrade to the latest version: