What is CVE-2009-1266?

CVE-2009-1266 is a high-severity software vulnerability with a CVSS score of 10. Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors.

Is CVE-2009-1266 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 2%.

What products does CVE-2009-1266 affect?

Tracked products affected include Wireshark. Check the version you run to see whether it is affected.

How do I fix CVE-2009-1266?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

← All products

CVE-2009-1266

HIGH severity · CVSS 10

10CVSS HIGH

Summary

Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges required—

User interaction—

Confidentiality impact—

Integrity impact—

Availability impact—

Exploit probability (EPSS)2%

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products we track (1)

Wireshark

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
http://secunia.com/advisories/34778Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
http://secunia.com/advisories/35416
http://wiki.rpath.com/Advisories:rPSA-2009-0062
http://www.securityfocus.com/archive/1/502745/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/50334