CVE-2009-4376

Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.

Affected products

Wireshark

Wireshark

= 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4

Fix

Available

CVSS 2.0

9.3 HIGH

EPSS

6.8% (94th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2009-12-21