CVE-2011-1140: Wireshark

Medium severity, CVSS 4.3. EPSS: 13.1% chance of exploitation in the next 30 days.

Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less LDAP (CLDAP) packet.

Affected products

• Wireshark Wireshark: version 1.0 only; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; …

Published 2011-03-03. Last modified 2026-06-16.