CVEブラウザに戻る

CVE-2007-6114

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1090%

EPSS Percentile16.41th

Published2007年11月23日

Last Modified2026年4月23日

Vulnerability Description

Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.

Affected Platforms (CPE)

📦

Wireshark

Wireshark

= 0.99

📦

Wireshark

Wireshark

= 0.99.0

📦

Wireshark

Wireshark

= 0.99.1

📦

Wireshark

Wireshark

= 0.99.2

📦

Wireshark

Wireshark

= 0.99.3

📦

Wireshark

Wireshark

= 0.99.4

📦

Wireshark

Wireshark

= 0.99.5

📦

Wireshark

Wireshark

= 0.99.6

References & Advisories

🔗 http://bugs.gentoo.org/show_bug.cgi?id=199958

🔗 http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html

🔗 http://secunia.com/advisories/27777

🔗 http://secunia.com/advisories/27817

🔗 http://secunia.com/advisories/28197

🔗 http://secunia.com/advisories/28207

🔗 http://secunia.com/advisories/28288

🔗 http://secunia.com/advisories/28304

関連する脆弱性情報

CVE-2007-611210.0

Buffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (cr...

CVE-2006-363210.0

Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly exe...

CVE-2006-362810.0

Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of se...

CVE-2007-611510.0

Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecified platform...