Buffer overflow in Wireshark

CVE-2011-1959

The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.

Vulnerability class: Buffer Overflow

EPSS: 0.030 (86.2th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 1.2, 1.2.0, 1.2.1
  • N/a — versions n/a

Weakness classification (CWE)

References