CVE-2014-4174: wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to e...

Security readout for executives and security teams

This issue affects Wireshark 1.10.x before 1.10.4 when it opens a malicious packet-trace file. A crafted file containing a large packet could corrupt memory, crash Wireshark, or potentially run code. The main business risk is analyst workstation compromise or disruption during packet investigation. Exposure is most likely where users or automation open packet-trace files in Wireshark 1.10.x before 1.10.4, especially captures received from external parties, customers, incident submissions, or shared repositories. Prioritize remediation for security, network, and forensic teams that open packet captures from outside the organization. The issue is old, but potential code execution in analyst tooling makes lingering vulnerable installations a meaningful risk. Mitigation focus: Upgrade Wireshark 1.10.x installations to 1.10.4 or later.; Review the Wireshark security advisory for vendor-confirmed guidance.; Avoid opening untrusted packet-trace files on vulnerable versions..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.