CVE-2012-2392

LOW 3.3CVE-2012-2392 · Published 30/06/2012 · updated 16/06/2026

In short

CVE-2012-2392 is a LOW (CVSS 3.3) vulnerability affecting wireshark (wireshark).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 89.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wireshark wireshark	`= 1.4.0= 1.4.1= 1.4.10= 1.4.11= 1.4.12= 1.4.13= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.8= 1.4.9= 1.6.0= 1.6.1= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7`	No fix yet

Description

Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.

References

secunia.com/advisories/49226
mandriva.com/security/advisories
mandriva.com/security/advisories
mandriva.com/security/advisories
securitytracker.com/id
wireshark.org/security/wnpa-sec-2012-08.html · Vendor Advisory
bugs.wireshark.org/bugzilla/show_bug.cgi
bugs.wireshark.org/bugzilla/show_bug.cgi
bugs.wireshark.org/bugzilla/show_bug.cgi
bugs.wireshark.org/bugzilla/show_bug.cgi
bugs.wireshark.org/bugzilla/show_bug.cgi
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15604

More vulnerabilities in wireshark

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free