CVE-2008-4685: Wireshark

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception.

Affected products

• Wireshark Wireshark: version 0.10.3 only; version 0.10.4 only; version 0.10.5 only; version 0.10.6 only; version 0.10.7 only; version 0.10.8 only; …

Published 2008-10-22. Last modified 2026-06-16.