Wireshark · Wireshark · CVE-2015-6244
**Name of the Vulnerable Software and Affected Versions**
Wireshark versions 1.12.x through 1.12.6
**Description**
The issue is related to the `dissect zbee secure` function in the ZigBee dissector, which improperly relies on length fields contained in packet data. This allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted packet. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.
**Recommendations**
For Wireshark versions 1.12.x through 1.12.6, update to version 1.12.7 or later to resolve the issue. As a temporary workaround, consider disabling the `dissect zbee secure` function in the ZigBee dissector to minimize the risk of exploitation.