CVE:CVE-2010-2994
CNNVD:CNNVD-201008-139
Wireshark是一款非常流行的网络协议分析工具,以前名为Ethereal。
Wireshark 0.10.13至1.0.14和1.2.0至1.2.9版本中的ASN.1 BER dissector存在基于栈的缓冲区溢出漏洞，导致未明影响和远程攻击向量。
solution:Upgrade wireshark wireshark to a higher version than 0.10.13,0.10.14,1.0,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.2,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,and avoid the version 0.10.13,0.10.14,1.0,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.2,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9