Multiple vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An error in the DICOM dissector can be exploited to cause an infinite loop when processing certain malformed packets.

2) An error when processing a Diameter dictionary file can be exploited to cause the process to crash.

3) An error when processing a snoop file can be exploited to cause the process to crash.

4) An error when processing compressed capture data can be exploited to cause the process to crash.

5) An error when processing a Visual Networks file can be exploited to cause the process to crash.

6) An error in the "desegment_tcp()" function (epan/dissectors/packet-tcp.c) when handling certain TCP segments can be exploited to dereference a NULL pointer and crash the process.

This vulnerability is reported in version 1.4.5 only.

The vulnerabilities #1 through #5 are reported in versions 1.2.0 through 1.2.16 and 1.4.0 through 1.4.6.

Solution
Update to version 1.2.17 or 1.4.7.

Provided and/or discovered by
1) Reported by the vendor.
6) Reported by rouli in a bug report.

The vendor also credits:
2, 3, 5) Huzaifa Sidhpurwala, Red Hat Security Response Team.
4) David Maciejak, Fortinet's FortiGuard Labs.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.wireshark.org/security/wnpa-sec-2011-07.html
http://www.wireshark.org/security/wnpa-sec-2011-08.html
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5837

Deep Links
Links available to Secunia VIM customers