Buffer overflow in Wireshark

CVE-2011-0713

Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long record in a Nokia DCT3 trace file.

Vulnerability class: Buffer Overflow

EPSS: 0.035 (87.9th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 1.2.0, 1.2.1, 1.2.2
  • N/a — versions n/a

Weakness classification (CWE)

References