RCE in Wireshark

CVE-2012-1594

epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.6.x before 1.6.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.016 (73.0th percentile) — read the EPSS interpretation.

Affected products

  • Wireshark — versions 1.6.0, 1.6.1, 1.6.2
  • N/a — versions n/a

Weakness classification (CWE)

References