Description
Multiple serious vulnerabilities have been found in Wireshark version 2.2.7. Malicious users can exploit these vulnerabilities to cause a denial of service.
Below is a complete list of vulnerabilities:
- A stack exhaustion vulnerability in the DAAP dissector can be exploited remotely via a specially designed DAAP data to cause a denial of service;
- A stack exhaustion vulnerability in the MP4 dissector can be exploited remotely via a specially designed MP4 data to cause a denial of service.
Technical details
Vulnerability (1) is related to the dissect_daap_one_tag() function in epan/dissectors/packet-daap.c.
Vulnerability (1) is related to the dissect_mp4_box() function in epan/dissectors/file-mp4.c.
Original advisories
Related products
CVE list
- CVE-2017-9617 warning
- CVE-2017-9616 warning
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!