Download Wireshark 1.4.3

Tuesday version 1.4.3 of Wireshark was released. Wireshark is an open source protocol analyzer and packet sniffer, which can analyze various network protocols and data packets on the network. The program can also use previously saved data traffic as input. Since version 1.2.0 there is a separate version for 64bit versions of Windows. As of version 1.4.0, there is also a 64bit version for Mac OS X, but Windows 2000 is no longer supported. In version 1.4.3 no new features have been added. However, a large number of problems have been resolved and various protocols have been updated.

What’s New

The following vulnerabilities have been fixed. see the security advisory for details and a workaround.

• FRAsse discovered that the MAC-LTE dissector could overflow a buffer. (Bug 5530)
• FRAsse discovered that the ENTTEC dissector could overflow a buffer. (Bug 5539)
• CVE-2010-4538: The ASN.1 BER dissector could assert and make Wireshark exit prematurely. (Bug 5537)

The following bugs have been fixed:

• AMQP failed assertion. (Bug 4048)
• Reassemble.c leaks memory for GLIB > 2.8. (Bug 4141)
• Fuzz testing reports possible dissector bug: TCP. (Bug 4211)
• Wrong length calculation in new_octet_aligned_subset_bits() (PER dissector). (Bug 5393)
• Function dissect_per_bit_string_display might read more bytes than available (PER dissector). (Bug 5394)
• Cannot load wpcap.dll & packet.dll from Wireshark program directory. (Bug 5420)
• Wireshark crashes with Copy -> Description on date/time fields. (Bug 5421)
• DHCPv6 OPTION_CLIENT_FQDN parse error. (Bug 5426)
• Information element Error for supported channels. (Bug 5430)
• Assert when using ASN.1 dissector with loading a ‘type table’. (Bug 5447)
• Bug with RWH parsing in Infiniband dissector. (Bug 5444)
• Help->About Wireshark mis-reports OS. (Bug 5453)
• Delegated-IPv6-Prefix(123) is shown incorrect as X-Ascend-Call-Attempt-Limit(123). (Bug 5455)
• “tshark -r file -T fields” is truncating exported data. (Bug 5463)
• gsm_a_dtap: incorrect “Extraneous Data” when decoding Packet Flow Identifier. (Bug 5475)
• Improper decode of TLS 1.2 packet containing both CertificateRequest and ServerHelloDone messages. (Bug 5485)
• LTE-PDCP UL and DL problem. (Bug 5505)
• CIGI 3.2/3.3 support broken. (Bug 5510)
• Prepare Filter in RTP Streams dialog does not work correctly. (Bug 5513)
• Wrong decode at ethernet OAM Y.1731 ETH-CC. (Bug 5517)
• WPS: RF band decryption. (Bug 5523)
• Incorrect LTP SDNV value handling. (Bug 5521)
• LTP bug found by randpkt. (Bug 5323)
• Buffer overflow in SNMP EngineID preferences. (Bug 5530)

Updated Protocol Support

• AMQP
• ASN.1 BER
• ASN.1 PER
• CFM
• CIGIA
• DHCPv6
• Diameter
• ENTTEC
• GSM A GM
• IEEE 802.11
• InfiniBand
• LTE-PDCP
• LTP
• MAC-LTE
• MP2T
• RADIUS
• SAMR
• SCCP
• SIP
• SNMP
• TCP
• TLS
• TN3270
• UNISTIM
• WPS

New and Updated Capture File Support

• Endace ERF
• Microsoft Network Monitor
• VMS TCPtrace

The following downloads are available:
Wireshark 1.4.3 for Windows (32bit)
Wireshark 1.4.3 for Windows (64bit)
Wireshark 1.4.3 for Windows (U3 version)
Wireshark 1.4.3 for PortableApps
Wireshark 1.4.3 for Mac OS X 10.5 (Intel, 32bit)
Wireshark 1.4.3 for Mac OS X 10.5 (PPC, 32bit)
Wireshark 1.4.3 for Mac OS X 10.6 (Intel, 64bit)
Wireshark 1.4.3 source code for Linux, Solaris, FreeBSD and NetBSD among others