CVE-2004-1141: The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (...

Security readout for executives and security teams

This is an old denial-of-service issue in Ethereal packet analysis software. A specially crafted HTTP packet could crash affected Ethereal versions while traffic or captures are being analyzed. The main business impact is disruption to security or network analysis workstations still running legacy Ethereal, not direct compromise of production systems. Exposure is likely limited to environments that still run Ethereal 0.10.1 through 0.10.7 or old distribution packages containing those versions. Modern environments are unlikely to be exposed unless legacy forensic, network troubleshooting, or lab systems remain in use. Treat as a legacy hygiene issue unless affected packet-analysis workstations are still in use. Prioritize remediation where those systems support incident response, monitoring, or regulated operational processes, because crashes can interrupt security analysis. Mitigation focus: Inventory systems for Ethereal 0.10.1 through 0.10.7.; Apply relevant vendor advisory updates where legacy packages remain installed.; Remove unsupported Ethereal installations that are no longer operationally required..

Prepared

Jun 30, 2026, 01:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.