VULNERABILITY INTELLIGENCE
CVE-2008-3933
CVSS score3.3 LOW
EPSS probability0.62%
CISA KEVNot currently listed
Published2008-09-04
Last modified2026-06-16
CVSS vectorAV:A/AC:L/Au:N/C:N/I:N/A:P
Description
Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted zlib-compressed data that triggers an invalid read in the tvb_uncompress function.
Weakness classification
- CWE-20: Improper Input Validation