CVE-2011-1591

CVE-2011-1591 describes a stack-based buffer overflow in the DECT dissector of Wireshark versions 1.4.x before 1.4.5. This vulnerability allows remote attackers to execute arbitrary code by providing a specially crafted .pcap file. With a CVSS score of 9.3, it is considered critical, indicating a network-based attack with high impact on confidentiality, integrity, and availability, though requiring medium attack complexity. While not listed on the KEV catalog, exploit code is publicly available, including multiple Metasploit modules and ExploitDB entries demonstrating both local and remote exploitation. Despite the availability of exploits, there is no evidence of active exploitation in the wild, and community discussion and media coverage are minimal. The EPSS score of 0.77213 suggests a higher than average probability of exploitation compared to other CVEs.