CVE-2009-3551: Wireshark

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Off-by-one error in the dissect_negprot_response function in packet-smb.c in the SMB dissector in Wireshark 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace. NOTE: some of these details are obtained from third party information.

Affected products

• Wireshark Wireshark: version 1.2 only; version 1.2.0 only; version 1.2.1 only

Published 2009-10-30. Last modified 2026-06-16.