CVE-2007-6117: Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows...

Security readout for executives and security teams

Older Wireshark/Ethereal versions could crash when processing specially crafted HTTP chunked messages. The CVE also notes possible arbitrary code execution, but the provided sources do not confirm exploit use or technical details. Exposure is mainly on analyst systems, sensors, or servers that parse untrusted packet captures or live traffic with vulnerable Wireshark components. Organizations are exposed if they still run Wireshark, Ethereal, or tshark in the affected version range, especially on systems that inspect untrusted captures or live network traffic. Modern supported versions should not normally be affected, but legacy forensic images, appliances, and lab workstations may persist. Treat this as a legacy exposure cleanup item unless affected versions are still in use. Priority rises if packet analysis systems process hostile traffic, malware captures, or customer-submitted pcaps, because the tool itself may become a compromise path. Mitigation focus: Upgrade Wireshark/Ethereal beyond 0.99.6 or install vendor-patched packages.; Check Debian, Gentoo, Red Hat, Fedora, Mandriva, SUSE, or rPath advisories if applicable.; Avoid opening untrusted packet captures with vulnerable Wireshark or tshark builds..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.