CVE-2023-0666

Summary

CVE-2023-0666 is a vulnerability affecting Wireshark version 4.0.5 and earlier. The issue arises due to Wireshark's inability to validate the length of an attacker-crafted Real-time Transport Protocol Secure (RTPS) packet. Consequently, a heap-based buffer overflow occurs, potentially leading to code execution with the privileges of the Wireshark process. This vulnerability could be exploited to gain unauthorized access or execute malicious code on the affected system. It is recommended that users upgrade to the latest version of Wireshark to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.