Vulnerability in Wireshark

CVE-2011-1590

The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.

EPSS: 0.018 (76.4th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 1.2.0, 1.2.1, 1.2.2
  • N/a — versions n/a

Weakness classification (CWE)

References