Download Wireshark 1.10.3

Version 1.10.3 of the open source protocol analyzer and packet niffer Wireshark has been released. With this program, various data packets and network protocols on the network can be analyzed. The program can also use previously saved data traffic as input. Wireshark runs on Windows, Linux, and OS X, with separate downloads for 32bit and 64bit versions of the operating systems. Below you will find all the changes and improvements that have been made in this release.

The following vulnerabilities have been fixed.

• wnpa-sec-2013-61 The IEEE 802.15.4 dissector could crash. (Bug 9139) CVE-2013-6336
• wnpa-sec-2013-62 The NBAP dissector could crash. (Bug 9168) CVE-2013-6337
• wnpa-sec-2013-63 The SIP dissector could crash. (Bug 9228) CVE-2013-6338
• wnpa-sec-2013-64 The OpenWire dissector could go into a large loop. (Bug 9248) CVE-2013-6339
• wnpa-sec-2013-65 The TCP dissector could crash. (Bug 9263) CVE-2013-6340

The following bugs have been fixed:

• new_packet_list: EAP-TLS reassemble does not happen when NEW_PACKET_LIST is toggled. (Bug 5349)
• TLS decryption fails with XMPP start_tls. (Bug 8871)
• Wrong Interpretation of GTS starting slot. (Bug 8946)
• “Follow TCP Stream” shows only the first HTTP req+res. (Bug 9044)
• The value of SEND_TO_UE in the DIAMETER Gx dictionary for Packet-Filter-Usage AVP is 0 instead of 1. (Bug 9126)
• Crash then try to delete the same entry (length range) twice. (Bug 9129)
• Crash if wrong “packet lengths range” entered. (Bug 9130)
• Bssgp ⇒ SGSN-INVOKE-TRACE use the wrong function… (Bug 9157)
• Minor correction to dissection of DLR frames in Ethernet/IP dissector. (Bug 9186)
• WebSphere MQ V7 Bug Fix 8322 TSHM_EBCDIC. (Bug 9198)
• EDNS0 “Higher bits in extended RCODE” incorrectly decoded in packet-dns.c. (Bug 9199)
• Files with pcap-ng Simple Packet Blocks can’t be read. (Bug 9200)
• Bug in RTP dissector if RTP extension is present. (Bug 9204)
• Improve “eHRPD Indicator” NVSE dissection in 3GPP2 A11 Registration Request. (Bug 9206)
• “make debian-package” fails, missing wsicon32.xpm. (Bug 9209)
• Fix typo in MODCOD list or DVB-S2 dissector. (Bug 9218)
• Ring buffer crash when tshark gets too far behind dumpcap. (Bug 9258)
• PTP Dissector Wrongfully Reports Malformed Packet. (Bug 9262)
• Wireshark lua dissector unable to load for media_type=application/octet-stream. (Bug 9296)
• Wireshark crash when dissecting packet with NTLMSSP. (Bug 9299)
• Padding in uint64 field in DCERPC protocol wrongly reported. (Bug 9300)
• DCERPC data_blobs are not correctly dissected when NDR64 encoding is used. (Bug 9301)
• Multiple PDUs in the same DCERPC packet are not correctly decrypted. (Bug 9302)
• The tshark summary line doesn’t display the frame number or displays it sporadically. (Bug 9317)
• Bluetooth: SDP improvements and minor fixes. (Bug 9327)
• Duplicate IRC header field abbreviation breaks filter (example: irc.response.command). (Bug 9360)

Updated Protocol Support

• 3GPP2 A11
• Bluetooth SDP
• BSSGP
• DCERPC
• DCERPC NDR
• DCERPC NT
• DIAMETER
• DNS
• DVB-S2
• Ethernet
• EtherNet/IP
• H.225
• IEEE 802.15.4
• IRC
• NBAP
• NTLMSSP
• OpenWire
• PTP
• RTP
• SIP
• TCP
• WiMax
• XMPP

The following downloads are available:

• Windows Installer (64-bit)
• Windows Installer (32-bit)
• Windows U3 (32 bit)
• Windows Portable Apps (32-bit)
• OS X 10.6 and later Intel 64-bit .dmg
• OS X 10.5 and later Intel 32-bit .dmg
• source code