Buffer overflow in Wireshark

CVE-2007-6114

Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.

Vulnerability class: Buffer Overflow

EPSS: 0.062 (92.8th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 0.99, 0.99.0, 0.99.1
  • N/a — versions n/a

Weakness classification (CWE)

References