CVE-2009-0601

BAJO 2.1CVE-2009-0601 · Published 16/02/2009 · updated 16/06/2026

En resumen

CVE-2009-0601 es una vulnerabilidad BAJO (CVSS 2.1) que afecta a wireshark (wireshark).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.37%, mayor que el 31.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
wireshark wireshark	`= 0.99.8= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5`	No fix yet

Description

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string specifiers in the HOME environment variable.

References

lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html · Mailing List
secunia.com/advisories/34264 · Broken Link
wiki.rpath.com/Advisories:rPSA-2009-0040 · Third Party Advisory
securityfocus.com/archive/1/501763/100/0/threaded · Third Party Advisory
securityfocus.com/bid/33690 · Patch
securitytracker.com/id · Third Party Advisory
vupen.com/english/advisories/2009/0370 · Third Party Advisory
wireshark.org/security/wnpa-sec-2009-01.html · Vendor Advisory
bugs.wireshark.org/bugzilla/show_bug.cgi · Issue Tracking
issues.rpath.com/browse/RPL-2984 · Third Party Advisory

Más vulnerabilidades de wireshark

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wireshark

= 0.99.8= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5

No fix yet

Más vulnerabilidades de wireshark

Ver todo →