CVE-2008-1072: Wireshark

Medium severity, CVSS 4.7. EPSS: 0.7% chance of exploitation in the next 30 days.

The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug.

Affected products

• Wireshark Wireshark: version 0.6 only; version 0.7.9 only; version 0.8.16 only; version 0.9.10 only; version 0.10 only; version 0.10.4 only; …

Published 2008-02-28. Last modified 2026-06-16.