CVE-2009-3829: Wireshark

High severity, CVSS 9.3. EPSS: 6.1% chance of exploitation in the next 30 days.

Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an "unsigned integer wrap vulnerability."

Affected products

• Wireshark Wireshark: up to and including 1.2.1; version 0.6 only; version 0.7.9 only; version 0.8.16 only; version 0.8.19 only; version 0.8.20 only; …

Published 2009-10-30. Last modified 2026-06-16.