wnpa-sec-2014-05 · Libpcap file parser crash

Summary

Name: Libpcap file parser crash

Docid: wnpa-sec-2014-05

Date: April 9, 2014

Affected versions: 1.10.0 to 1.10.3

Fixed versions: 1.10.4

References:
MSVR 449
Wireshark issue 9753
CVE-2014-4174

Details

Description

The libpcap file parser could crash. Discovered by Jeremy Brown.

Impact

It may be possible to make Wireshark crash or execute malicious code by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Resolution

Upgrade to Wireshark 1.10.4 or later.