CVE-2013-7114

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.11 Wireshark versions 1.10.x through 1.10.3

Description The issue is related to multiple buffer overflows in the create ntlmssp v2 key function in the NTLMSSP v2 dissector. This can be exploited by remote attackers to cause a denial of service, specifically an application crash, by sending a packet with a long domain name.

Recommendations For Wireshark versions 1.8.x through 1.8.11, update to version 1.8.12 or later. For Wireshark versions 1.10.x through 1.10.3, update to version 1.10.4 or later.