Secunia

Some vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An array indexing error in the IPMI dissector can be exploited to cause a crash via a specially crafted network packet.

2) Errors in the Bluetooth L2CAP, RADIUS, MIOP, and sFlow dissectors can be exploited to cause crashes or hangs via specially crafted network packets.

The vulnerabilities are reported in version 1.2.0.

3) An error in the AFS dissector can be exploited to cause a crash via a specially crafted network packet.

The vulnerability is reported in versions 0.9.2 through 1.2.0.

4) An error in the Infiniband dissector can be exploited to cause a crash on certain platforms via a specially crafted network packet.

The vulnerability is reported in versions 1.0.6 through 1.2.0.

Solution
Update to version 1.0.9 or 1.2.1.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.wireshark.org/security/wnpa-sec-2009-04.html
http://www.wireshark.org/security/wnpa-sec-2009-05.html

Deep Links
Links available in Customer Area