[ MDVSA-2010:031 ] wireshark

[dude67]

_______________________________________________________________________

Package : wireshark
Date : February 2, 2010
Affected: 2008.0, 2009.1, Corporate 4.0, Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

This advisory updates Wireshark to the version 1.0.11, which fixes
the following vulnerabilities:

The SMB and SMB2 dissectors could crash (CVE-2009-4377).
The Infiniband dissector could crash on some platforms (CVE-2009-2563).
Several buffer overflows were discovered and fixed in the LWRES
dissector.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2009-4377
http://cve.mitre.org/cgi-bin/cvename.cg ... -2009-2563
_______________________________________________________________________