Multiple vulnerabilities have been identified in Wireshark, which could be exploited by local or remote attackers to cause a denial of service or compromise a vulnerable system.
The first issue is caused by a format string error when processing the "HOME" environment variable on non-Windows systems, which could allow local attackers to crash an affected application or execute arbitrary code.
The second vulnerability is caused by buffer overflow errors when reading a malformed NetScreen snoop file, which could allow attackers to crash an affected application or execute arbitrary code by tricking a user into reading a malicious packet trace file.
The third issue is caused by an error when processing a malformed Tektronix K12 text capture file, which could be exploited to cause a denial of service.
