Multiple vulnerabilities have been reported in Wireshark, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise a vulnerable system.

1) A division by zero error within the DCP ETSI dissector can be exploited to cause a crash.

2) An error within the MongoDB dissector can be exploited to trigger an infinite loop and consume excessive CPU resources.

3) An error within the XTP dissector can be exploited to trigger an infinite loop and consume excessive CPU resources.

4) Some errors within the ERF dissector can be exploited to cause buffer overflows.

5) An error within the AFP dissector can be exploited to trigger an infinite loop and consume excessive CPU resources.

6) An error within the RTPS2 dissector can be exploited to cause a buffer overflow.

7) An error within the GSM RLC MAC dissector can be exploited to cause a buffer overflow.

8) An error within the CIP dissector can be exploited to exhaust memory.

9) An error within the STUN dissector can be exploited to cause a crash.

10) An error within the EtherCAT Mailbox dissector can be exploited to cause a crash.

11) An error within the CTDB dissector can be exploited to trigger an infinite loop and consume excessive CPU resources.

12) An error within the Ixia IxVeriWave file parser can be exploited to cause a buffer overflow.

Successful exploitation of vulnerabilities 4, #6, #7, and #12 may allow execution of arbitrary code.

The vulnerabilities are reported in versions prior to 1.8.2, 1.6.10, and 1.4.15.

Solution
Update to version 1.8.2, 1.6.10, or 1.4.15.

Provided and/or discovered by
1, 12) Reported by the vendor
2, 3, 8, 11) The vendor credits Ben Schmidt
4, 6, 7, 9, 10) The vendor credits Laurent Butti
5) The vendor credits Stefan Cornelius

Original Advisory
http://www.wireshark.org/security/wnpa-sec-2012-13.html
http://www.wireshark.org/security/wnpa-sec-2012-14.html
http://www.wireshark.org/security/wnpa-sec-2012-15.html
http://www.wireshark.org/security/wnpa-sec-2012-16.html
http://www.wireshark.org/security/wnpa-sec-2012-17.html
http://www.wireshark.org/security/wnpa-sec-2012-18.html
http://www.wireshark.org/security/wnpa-sec-2012-19.html
http://www.wireshark.org/security/wnpa-sec-2012-20.html
http://www.wireshark.org/security/wnpa-sec-2012-21.html
http://www.wireshark.org/security/wnpa-sec-2012-22.html
http://www.wireshark.org/security/wnpa-sec-2012-23.html
http://www.wireshark.org/security/wnpa-sec-2012-24.html
http://www.wireshark.org/security/wnpa-sec-2012-25.html

Deep Links
Links available to Secunia VIM customers