Improper input validation in Wireshark

CVE-2008-4682

wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a malformed Tamos CommView capture file (aka .ncf file) with an "unknown/unexpected packet type" that triggers a failed assertion.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.093 (94.8th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 0.99.7, 0.99.8, 1.0
  • N/a — versions n/a

Weakness classification (CWE)

References