CVE-2011-0024: Wireshark

High severity, CVSS 9.3. EPSS: 5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted capture file.

Affected products

• Wireshark Wireshark: up to and including 1.0.16; version 0.99.2 only; version 0.99.3 only; version 0.99.4 only; version 0.99.5 only; version 0.99.6 only; …

Published 2011-03-28. Last modified 2026-06-16.