CVE-2007-3389 Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.
MediumCVSS 5.0
EPSS 16.3%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wireshark | = 0.99.0 | No fix listed |
| wireshark | = 0.99.1 | No fix listed |
| wireshark | = 0.99.2 | No fix listed |
| wireshark | = 0.99.3 | No fix listed |
| wireshark | = 0.99.4 | No fix listed |
| wireshark | = 0.99.5 | No fix listed |
| debian/wireshark(Debian:12) | < 0.99.6pre1-1 | 0.99.6pre1-1 |
| debian/wireshark(Debian:13) | < 0.99.6pre1-1 | 0.99.6pre1-1 |
| debian/wireshark(Debian:14) | < 0.99.6pre1-1 | 0.99.6pre1-1 |
References
- Debian Security Tracker CVE-2007-3389 vendor-advisory
- 37643 vdb-entry
- 25833 third-party-advisory
- 25987 third-party-advisory
- 26004 third-party-advisory
- 26499 third-party-advisory
- 27592 third-party-advisory
- 28583 third-party-advisory
- GLSA-200708-12 vendor-advisory
- MDKSA-2007:145 vendor-advisory
- SUSE-SR:2007:015 vendor-advisory
- RHSA-2007:0709 vendor-advisory
- RHSA-2007:0710 vendor-advisory
- RHSA-2008:0059 vendor-advisory
- 24662 vdb-entry
- 1018315 vdb-entry
- ADV-2007-2353 vdb-entry
- www.wireshark.org
- www.wireshark.org
- wireshark-chunkedhttp-dos(35207) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:9964 signature vdb-entry