CVE-2017-7702

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.11 Wireshark versions 2.2.0 through 2.2.5

Description The WBXML dissector could enter an infinite loop, triggered by packet injection or a malformed capture file. This issue was addressed by adding length validation in epan/dissectors/packet-wbxml.c.

Recommendations For Wireshark versions 2.0.0 through 2.0.11, update the dissector to include length validation to prevent infinite loops. For Wireshark versions 2.2.0 through 2.2.5, update the dissector to include length validation to prevent infinite loops.