CVE-2009-0601

Common Vulnerabilities and Exposures

CVE-2009-0601 at MITRE

Details

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string specifiers in the HOME environment variable.

Novell Bugzilla entry: 473828

SUSE Security Advisories:

SUSE-SR:2009:005, published Mon, 02 Mar 2009 13:00:00 +0000
SUSE-SR:2009:005 , published Mon, 02 Mar 2009 13:00:00 +0000

Product(s)	Fixed package version(s)	References
openSUSE 10.3	`wireshark >= 0.99.6-31.15` `wireshark-devel >= 0.99.6-31.15`	ZYPP Patch Nr: 6007 SAT Patch Nr: 539
openSUSE 11.0	`wireshark-debuginfo >= 1.0.0-17.9` `wireshark-debugsource >= 1.0.0-17.9`	ZYPP Patch Nr: 6007 SAT Patch Nr: 539
openSUSE 11.0	`wireshark >= 1.0.0-17.9` `wireshark-devel >= 1.0.0-17.9`	ZYPP Patch Nr: 6007 SAT Patch Nr: 539
openSUSE 11.1	`wireshark-debuginfo >= 1.0.4-2.7.1` `wireshark-debugsource >= 1.0.4-2.7.1`	ZYPP Patch Nr: 6007 SAT Patch Nr: 539
openSUSE 11.1	`wireshark >= 1.0.4-2.7.1` `wireshark-devel >= 1.0.4-2.7.1`	ZYPP Patch Nr: 6007 SAT Patch Nr: 539