Vulnerability in Wireshark

CVE-2011-2175

Integer underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a malformed Visual Networks file that triggers a heap-based buffer over-read.

EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 1.2, 1.2.0, 1.2.1
  • N/a — versions n/a

Weakness classification (CWE)

References