CVE-2011-1592 | Vulnerability Database | Aqua Security

The NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4.5 on Windows uses an incorrect integer data type during decoding of SETCLIENTID calls, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.

Affected Software

Name	Vendor	Start Version	End Version
Wireshark	Wireshark	1.4.0 (including)	1.4.0 (including)
Wireshark	Wireshark	1.4.1 (including)	1.4.1 (including)
Wireshark	Wireshark	1.4.2 (including)	1.4.2 (including)
Wireshark	Wireshark	1.4.3 (including)	1.4.3 (including)
Wireshark	Wireshark	1.4.4 (including)	1.4.4 (including)
Wireshark	Ubuntu	upstream	*

References

http://anonsvn.wireshark.org/viewvc?revision=34115\u0026view=revision
http://openwall.com/lists/oss-security/2011/04/18/2
http://openwall.com/lists/oss-security/2011/04/18/8
http://secunia.com/advisories/44172
http://www.mandriva.com/security/advisories?name=MDVSA-2011:083
http://www.osvdb.org/71847
http://www.vupen.com/english/advisories/2011/1022
http://www.wireshark.org/security/wnpa-sec-2011-06.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5209
https://exchange.xforce.ibmcloud.com/vulnerabilities/66833
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14987

NVD	https://nvd.nist.gov/vuln/detail/CVE-2011-1592
CWE	https://cwe.mitre.org/data/definitions/189.html