Wireshark released an update to fix multiple vulnerabilities in version 1.2.0. to 1.2.9. This release fixes several bugs. Wireshark indicated that "It may be possible to make Wireshark crash, hang, or execute code by injecting a series of malformed packets onto the wire or by convincing someone to read a malformed packet trace file."

References for the 1.2.x branch:

Release announcement is available here.

Release Notes and bug fixes is available here.

Reference for the 1.0.x branch:

Release announcement is available here.

-----------

Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot org