CVE Feed

    Dashboard / CVE / CVE-2009-4378

    CVE-2009-4378

    The IPMI dissector in Wireshark 1.2.0 through 1.2.4 on Windows allows remote attackers to cause a denial of service (crash) via a crafted packet, related to "formatting a date/time using strftime."

    Published:Dec 21, 2009
    Last Modified:Apr 23, 2026
    EPS:Dec 21, 2009
    EPSS Score:0.00541
    CVSS Score:4.3

    Affected Products

    Vendor
    Microsoft
    Product
    Windows
    Vendor
    Wireshark
    Product
    Wireshark

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-87602 (CVSS 4.7) — Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to…
    CVE-2026-87509 (CVSS 8.1) — Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attac…
    CVE-2026-87618 (CVSS 8.3) — Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remo…
    CVE-2026-87653 (CVSS 5.4) — UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote atta…
    CVE-2026-87528 (CVSS 9.6) — Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to pote…
    CVE-2026-87644 (CVSS 8.3) — Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attack…
    CVE-2026-87616 (CVSS 8.3) — Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attack…
    CVE-2026-87454 (CVSS 6.5) — Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker…
    CVE-2026-87494 (CVSS 9.6) — Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leve…
    CVE-2026-87530 (CVSS 8.1) — Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 a…

    References

    http://osvdb.org/61179
    http://secunia.com/advisories/37842
    http://www.securityfocus.com/bid/37407
    http://www.securitytracker.com/id?1023374
    http://www.vupen.com/english/advisories/2009/3596
    http://www.wireshark.org/security/wnpa-sec-2009-09.html
    https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4319
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7576
    https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html
    http://osvdb.org/61179
    http://secunia.com/advisories/37842
    http://www.securityfocus.com/bid/37407
    http://www.securitytracker.com/id?1023374
    http://www.vupen.com/english/advisories/2009/3596
    http://www.wireshark.org/security/wnpa-sec-2009-09.html
    https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4319
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7576
    https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01248.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High