CVE-2012-4298: Sun Sunos

Medium severity, CVSS 5.4. EPSS: 6% chance of exploitation in the next 30 days.

Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.

Affected products

• Sun Sunos: version 5.11 only
• Wireshark Wireshark: version 1.8.0 only; version 1.8.1 only

Published 2012-08-16. Last modified 2026-06-16.