CVE-2007-6114: Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to...

Security readout for executives and security teams

This is an old Wireshark vulnerability where specially crafted network data or trace files could crash the analyzer and might allow code execution. The business risk is mainly to legacy systems and analysts processing untrusted packet captures, not ordinary modern endpoints. Exposure is most likely where old Wireshark, Ethereal, or tshark packages remain installed, especially on security workstations, lab systems, appliances, or automated capture-processing workflows that handle untrusted traffic or trace files. Treat this as a cleanup priority for legacy security tooling. It is high impact if present, but likely limited to outdated installations and packet-analysis workflows rather than broadly exposed internet services. Mitigation focus: Upgrade affected Wireshark, Ethereal, and tshark installations using vendor-supported packages.; Remove unsupported Wireshark 0.99.0 through 0.99.6 builds from production environments.; Limit processing of untrusted packet captures to isolated analysis systems..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.