Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2009-3829
HistoryOct 30, 2009 - 8:30 p.m.

CVE-2009-3829

2009-10-3020:30:00
Debian Security Bug Tracker
security-tracker.debian.org
10

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.064

Percentile

93.7%

Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an “unsigned integer wrap vulnerability.”

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.064

Percentile

93.7%