Buffer overflow in Wireshark

CVE-2011-4102

Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service (application crash) via a malformed file.

Vulnerability class: Buffer Overflow

EPSS: 0.032 (86.7th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 1.4.0, 1.4.1, 1.4.2
  • N/a — versions n/a

Weakness classification (CWE)

References