CVE-2011-4102

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.0 through 1.4.9 Wireshark versions 1.6.x before 1.6.3

Description The issue is related to a heap-based buffer overflow in the erf read header function in the ERF file parser. This can be exploited by remote attackers via a malformed file, leading to a denial of service (application crash).

Recommendations For Wireshark versions 1.4.0 through 1.4.9, update to a version outside of this range to resolve the issue. For Wireshark versions 1.6.x before 1.6.3, update to version 1.6.3 or later to resolve the issue.