Secunia

Multiple vulnerabilities have been reported in Ethereal, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

1) Various types of errors including NULL pointer dereference errors, format string errors, infinite loop errors, and boundary errors exists in a multitude of protocol dissectors.

2) Ethereal Windows installer ships with a vulnerable version of zlib library.

For more information:
SA15949
SA16137

Successful exploitation causes Ethereal to stop responding, consume a large amount of system resources, crash, or execute arbitrary code.

The vulnerabilities affect versions 0.8.5 through 0.10.11

Solution
Update to version 0.10.12.
Further details available in Customer Area

Provided and/or discovered by
Discovered by the vendor and the following people:
* Steve Grubb, Red Hat
* vade79

Changelog
Further details available in Customer Area

Original Advisory
Ethereal.com:
http://www.ethereal.com/appnotes/enpa-sa-00020.html

iDEFENSE:
http://www.idefense.com/application/poi/display?id=289&type=vulnerabilities

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area