CVE-2007-6111

9 documents7 sources
Severity
7.1HIGH
EPSS
4.0%
top 11.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Ethereal Group EtherealWireshark Wireshark
Timeline
PublishedNov 23
Latest updateMay 1

Description

Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages3 packages

▶Debianwireshark< 0.99.7~pre1-1+3
▶NVDwireshark/wireshark12 versions+11
▶NVDethereal_group/ethereal57 versions+56

Patches

Patch: www.securityfocus.com ↗Patch: www.wireshark.org ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-g84g-mfq4-3j25: Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP↗2022-05-01
▶
CVEList
CVE-2007-6111: Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP↗2007-11-23
▶
OSV
CVE-2007-6111: Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP↗2007-11-23
▶

📋Vendor Advisories

3
Red Hat
wireshark SMB dissector crash↗2007-12-18
▶
Red Hat
wireshark mp3 and ncp flaws↗2007-11-22
▶
Debian
CVE-2007-6111: wireshark - Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remo...↗2007
▶

💬Community

2
Bugzilla
CVE-2007-6438 wireshark SMB dissector crash↗2008-01-02
▶
Bugzilla
CVE-2007-6111 wireshark mp3 and ncp flaws↗2007-11-23
▶