CVE-2008-3139

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-07-10 · updated 2026-06-16
Weakness: CWE-200

Description

The RTMPT dissector in Wireshark (formerly Ethereal) 0.99.8 through 1.0.0 allows remote attackers to cause a denial of service (crash) via unknown vectors. NOTE: this might be due to a use-after-free error.

Affected products

Rpath Linux: 1
Wireshark Foundation Wireshark: 0.9.5, 0.99.2, 0.99.3, 0.99.4, 0.99.5, 0.99.6 (+4)

References

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
http://secunia.com/advisories/30886
http://secunia.com/advisories/30942
http://secunia.com/advisories/31085
http://secunia.com/advisories/31378
http://secunia.com/advisories/31687
http://security.gentoo.org/glsa/glsa-200808-04.xml
http://securitytracker.com/id?1020404
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0212
http://www.securityfocus.com/archive/1/493882/100/0/threaded
http://www.securityfocus.com/bid/30020
http://www.vupen.com/english/advisories/2008/1982/references

Get alerted when CVE-2008-3139 or the next vulnerability affects your stack