Wireshark is a popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education.
Wireshark 1.4.3 fixes the following vulnerabilities:
FRAsse discovered that the MAC-LTE dissector could overflow a buffer. Versions affected: 1.2.0 to 1.2.13 and 1.4.0 to 1.4.2.
FRAsse discovered that the ENTTEC dissector could overflow a buffer. Versions affected: 1.2.0 to 1.2.13 and 1.4.0 to 1.4.2. CVE-2010-4538
The ASN.1 BER dissector could assert and make Wireshark exit prematurely. Versions affected: 1.4.0 to 1.4.2.
It may be possible to make Wireshark crash by injecting a series of malformed packets onto the wire or by convincing someone to read a malformed packet trace file.