CVE-2007-6114: Buffer Overflow
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6114?
CVE-2007-6114 is considered a high severity vulnerability due to the potential for remote code execution and denial of service.
How do I fix CVE-2007-6114?
To fix CVE-2007-6114, update Wireshark to a version later than 0.99.6 where the vulnerability has been patched.
What versions of Wireshark are affected by CVE-2007-6114?
CVE-2007-6114 affects Wireshark versions 0.99.0 through 0.99.6.
What types of attacks can exploit CVE-2007-6114?
CVE-2007-6114 can be exploited through manipulated SSL packets or specialized iSeries Communication trace files.
What are the risks of not addressing CVE-2007-6114?
Not addressing CVE-2007-6114 could lead to application crashes or potential unauthorized execution of arbitrary code.