CVE-2007-6451: Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows rem...

Security readout for executives and security teams

This is a denial-of-service flaw in older Wireshark versions. A specially crafted packet or capture involving the CIP dissector could make Wireshark or tshark allocate excessive memory and crash. The business impact is disruption to packet analysis workflows, not evidence of data theft or system takeover from the supplied sources. Exposure is most plausible on legacy systems still running Wireshark or tshark 0.9.14 to 0.99.6 and processing untrusted live traffic or capture files. Modern supported Wireshark deployments are unlikely to be affected, but evidence should come from asset and package inventory. Prioritize as a legacy-tool availability issue. It is not KEV-listed and the supplied sources show denial of service, not compromise. Remediate during normal vulnerability cycles unless vulnerable packet-analysis systems support urgent incident response or operational monitoring. Mitigation focus: Identify Wireshark and tshark versions across analyst workstations and servers.; Upgrade affected installations using Wireshark or operating-system vendor advisories.; Avoid opening untrusted packet captures on vulnerable versions..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.