Mandriva Linux Security Advisory 2009-058 – Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file. Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame. Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string specifiers in the HOME environment variable. This update provides Wireshark 1.0.6, which is not vulnerable to these issues.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75245/MDVSA-2009-058.txt
Source: https://packetstormsecurity.com/files/75245/Mandriva-Linux-Security-Advisory-2009-058.html