cpe:/a:wireshark:wireshark:1.2.0 cpe:/a:wireshark:wireshark:1.2.1 cpe:/a:wireshark:wireshark:1.2.2 cpe:/a:wireshark:wireshark:1.2.3 cpe:/a:wireshark:wireshark:1.2.4 CVE-2009-4376 2009-12-21T16:30:00.267-05:00 2017-09-18T21:29:57.797-04:00 9.3 NETWORK MEDIUM NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2009-12-22T07:21:00.000-05:00 SECTRACK 1023374 BID 37407 SECUNIA 37842 SECUNIA 37916 OSVDB 61177 VUPEN ADV-2009-3596 FEDORA FEDORA-2009-13592 CONFIRM http://www.wireshark.org/security/wnpa-sec-2009-09.html MISC https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4022 CONFIRM https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4294 Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.