I can tell you from the very beginning that this release doesn't address any
specific Vista issue. Apart from a minor change in the the user level code,
all the fixes are in the driver, and a bug there causes a BSOD.
I'd like to understand what's going on with Vista+nmap and hopefully address
it in the next WinPcap 4.1 beta, so any help from the nmap developers is
appreciated :-)
Have a nice day
GV
----- Original Message -----
From: "DePriest, Jason R." <jrdepriest_at_gmail.com>
To: "Nmap Dev" <nmap-dev_at_insecure.org>
Sent: Friday, November 09, 2007 11:10 AM
Subject: Fwd: [Wireshark-dev] [ANNOUNCE] WinPcap 4.0.2 has been released
> Folks might want to see if this helps with any of the strange Vista
> issues.
>
> -Jason
>
> ---------- Forwarded message ----------
> From: Gianluca Varenni
> Date: Nov 9, 2007 11:47 AM
> Subject: [Wireshark-dev] [ANNOUNCE] WinPcap 4.0.2 has been released
> To: Developer support list for Wireshark
>
>
> As of today, WinPcap 4.0.2 is available in the download section of the
> WinPcap website, http://www.winpcap.org/install/ .
>
> This maintenance release addresses a security vulnerability reported
> by the iDefense Labs in a soon-to-be-released advisory.
> Full details can be found in the change log attached at the end of
> this message.
>
> Gianluca Varenni
> WinPcap Team
>
>
>
> Changelog from WinPcap 4.0.1
> ============================
>
> - Disabled support for monitor mode (also called TME, Table Management
> Extensions) in the driver. This module suffers from several security
> vulnerabilities that could result in BSODs or privilege escalation
> attacks. This fix addresses a security vulnerability reported by the
> iDefense Labs.
>
> - Bug fixing:
> * Added a missing NULL pointer check in pcap_open()
> * Fixed a misplaced #ifdef WIN32 directive in pcap_open().
> * Fixed a bug in the send routine of the driver that could cause a
> crash under low resources conditions.
> * Fixed a bug in the installer causing a mis-detection of a previous
> WinPcap installation
> * Minor cleanup of some #define directives in the driver (to disable
> the TME extensions).
>
> =========
>
>
>
>
>
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev_at_wireshark.org
> http://www.wireshark.org/mailman/listinfo/wireshark-dev
>
>
>
>
> --
> NOTICE: This email is being sent in clear-text across the public
> Internet. Therefore, any attempts to include unenforceable legalese
> restrictions are ridiculous and pointless. If you can read this,
> consider yourself authorized (whether I like it or not).
>
--------------------------------------------------------------------------------
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://SecLists.Org
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org
Received on Nov 09 2007
Intro
