Some vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

1) An off-by-one error exists within the SigComp Universal Decompressor Virtual Machine.

This is related to vulnerability #5 in:
SA40112

2) An error in within the "ASN.1 BER" dissector can be exploited to cause a stack overflow.

The vulnerability is caused due to a regression of vulnerability #2 in:
SA40112

3) A NULL pointer dereference error in the "GSM A RR" dissector can be exploited to cause a crash.

4) An error in the "IPMI" dissector can be exploited to trigger an infinite loop.

The vulnerabilities are reported in versions prior to 1.0.15 and 1.2.10. Vulnerabilities #3 and #4 only affected 1.2.x versions.

Solution
Update to version 1.0.15 or 1.2.10.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.wireshark.org/security/wnpa-sec-2010-07.html
http://www.wireshark.org/security/wnpa-sec-2010-08.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area