CVE-2009-2560: Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service...

Security readout for executives and security teams

This CVE covers Wireshark crashes when it processes malformed packet trace files through Bluetooth L2CAP, RADIUS, or MIOP dissectors. The business risk is disruption to analysts or systems that open untrusted captures, not confirmed system takeover. The source bundle does not show active exploitation. Exposure is most likely on analyst workstations, shared malware-analysis systems, or automated workflows that process untrusted packet capture files with affected Wireshark versions. Treat as a targeted operational reliability risk for teams handling packet captures. Prioritize remediation where Wireshark processes untrusted files, especially in SOC, incident response, or malware-analysis workflows. Mitigation focus: Identify Wireshark versions on analyst and automation systems.; Review Wireshark advisories WNPA-SEC-2009-04 and WNPA-SEC-2009-08.; Upgrade affected installations to vendor-fixed supported releases where applicable..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.