CVE-2010-2995: Wireshark

High severity, CVSS 10.0. EPSS: 6.7% chance of exploitation in the next 30 days.

The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, different vulnerabilities than CVE-2010-2287.

Affected products

• Wireshark Wireshark: version 0.10.8 only; version 0.10.9 only; version 0.10.10 only; version 0.10.11 only; version 0.10.12 only; version 0.10.13 only; …

Published 2010-08-13. Last modified 2026-06-16.