CVE-2007-6115: Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running...

Security readout for executives and security teams

CVE-2007-6115 is a Wireshark vulnerability in the ANSI MAP protocol parser. A malicious packet capture or traffic input could crash Wireshark and might allow code execution. The public bundle names Wireshark 0.99.5 to 0.99.6 and does not show active exploitation. Exposure is most likely on analyst workstations, sensor systems, or servers running affected Wireshark or TShark versions and processing untrusted captures or live telecom-related traffic containing ANSI MAP data. Prioritize remediation where Wireshark is used for incident response, network monitoring, or forensic analysis. The affected versions are very old, so exposure should be uncommon, but vulnerable analysis workstations may process attacker-controlled data during investigations. Mitigation focus: Identify and retire Wireshark or TShark 0.99.5 to 0.99.6 installations.; Consult Wireshark WNPA-SEC-2007-03 and OS vendor advisories for fixed packages.; Use supported vendor-fixed Wireshark builds rather than legacy releases..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.