Buffer overflow in Wireshark

CVE-2011-0538

Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed file.

Vulnerability class: Buffer Overflow

EPSS: 0.075 (93.9th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 1.2.0, 1.2.1, 1.2.2
  • N/a — versions n/a

Weakness classification (CWE)

References