CVE-2011-1959

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.x through 1.2.16 Wireshark versions 1.4.x through 1.4.6

Description The issue is related to the snoop read function in wiretap/snoop.c, which does not properly handle certain virtualizable buffers. This allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.

Recommendations For Wireshark versions 1.2.x through 1.2.16, update to version 1.2.17 or later. For Wireshark versions 1.4.x through 1.4.6, update to version 1.4.7 or later.