Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

Wireshark SMB object export overflow allows remote code execution

Original title: ZDI-26-900: Wireshark SMB Object Export Integer Overflow Remote Code Execution Vulnerability

ZDI Published Advisories ()
Read at zerodayinitiative.com
Part of a story covered by 3 sourcesZDI publishes three Wireshark remote code execution advisoriesMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

ZDI rates the integer overflow 8.8 and says user interaction is required; no CVE is listed.

Zero Day Initiative published ZDI-26-900 for an integer overflow in Wireshark’s SMB object export. Remote attackers can execute arbitrary code, but the user must interact. ZDI assigned CVSS 8.8. The snippet names no CVE, affected versions, or fix.

Key facts
  • Advisory identifier is ZDI-26-900.
  • The flaw is an integer overflow in SMB object export.
  • User interaction is required.
  • ZDI assigned a CVSS rating of 8.8.
Security assessment · AI, from the article

Impact: remote arbitrary code execution after user interaction

ProductAffected
Wireshark—
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
ATT&CK
T1203 Exploitation for Client Execution
Tags
wiresharkremote-code-executioninteger-overflowsmb
Vendors
Wireshark

From the original article

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wireshark. User interaction is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.

ZDI Published Advisories

zerodayinitiative.com

Read the full article at ZDI Published Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.