CVE-2009-3550

The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party information.

Published: Oct 30, 2009
Updated: Nov 8, 2023
CVE: CVE-2009-3550
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
wireshark / wireshark	0.10.3	0.10.3.x
wireshark / wireshark	0.10.6	0.10.6.x
wireshark / wireshark	1.0.9	1.0.9.x
wireshark / wireshark	0.10.4	0.10.4.x
wireshark / wireshark	1.0.1	1.0.1.x
wireshark / wireshark	0.10.14	0.10.14.x
wireshark / wireshark	1.2.0	1.2.0.x
wireshark / wireshark	0.10.9	0.10.9.x
wireshark / wireshark	0.10.7	0.10.7.x
wireshark / wireshark	1.0	1.0.x
wireshark / wireshark	0.10.8	0.10.8.x
wireshark / wireshark	1.0.2	1.0.2.x
wireshark / wireshark	1.0.4	1.0.4.x
wireshark / wireshark	1.0.3	1.0.3.x
wireshark / wireshark	1.0.6	1.0.6.x
wireshark / wireshark	0.10.2	0.10.2.x
wireshark / wireshark	0.10.13	0.10.13.x
wireshark / wireshark	1.2.1	1.2.1.x
wireshark / wireshark	0.10.12	0.10.12.x
wireshark / wireshark	0.10.10	0.10.10.x
wireshark / wireshark	1.0.8	1.0.8.x
wireshark / wireshark	1.0.5	1.0.5.x
wireshark / wireshark	0.10.5	0.10.5.x
wireshark / wireshark	1.2	1.2.x
wireshark / wireshark	0.10.11	0.10.11.x
wireshark / wireshark	1.2.2	1.2.2.x
wireshark / wireshark	1.0.0	1.0.0.x
wireshark / wireshark	1.0.7	1.0.7.x

Vulnerability Database

290,020

CVE-2009-3550