CVE-2011-1139: wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause...

Security readout for executives and security teams

A malicious pcap-ng packet capture file can crash vulnerable Wireshark versions. This is mainly a denial-of-service risk for analysts or systems that open untrusted capture files, not evidence of code execution from the supplied sources. Exposure is most likely in security teams, support teams, labs, or automated workflows that open pcap-ng files from external or untrusted sources using old Wireshark builds. Treat as a targeted availability issue for teams that rely on packet analysis. Prioritize cleanup if vulnerable Wireshark is still present, especially where external capture files are routinely opened. Mitigation focus: Upgrade Wireshark beyond the affected 1.2.x and 1.4.x ranges.; Prefer current vendor-supported Wireshark or distribution packages.; Restrict handling of untrusted pcap-ng files on vulnerable workstations..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.