CVE-2011-0713: Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3...

Security readout for executives and security teams

Old Wireshark versions can crash, and possibly suffer other memory-corruption impact, when processing a specially long Nokia DCT3 trace record. The practical business risk is highest for analysts or support teams who open untrusted trace files using affected Wireshark versions. Exposure is likely limited to systems running affected Wireshark builds that open or import Nokia DCT3 trace files. Modern supported Wireshark deployments are unlikely to be affected, but legacy analyst workstations, forensic images, and old Linux packages should be checked. Treat this as a targeted legacy-tooling risk, not a broad emergency. Prioritize remediation where employees open externally supplied packet or trace files, especially security, support, telecom, and forensic teams. Mitigation focus: Upgrade Wireshark to 1.2.15, 1.4.4, or a supported later release.; Remove affected Wireshark builds from analyst and support workstations.; Avoid opening untrusted Nokia DCT3 trace files until remediated..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.