Secunia CSI 5.0
Overview
Advisories
Research
Forums
Create Profile
Our Commitment
All Threads
PSI
PSI API
CSI
OSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Wireshark 64bit includes outdated GTK library

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
johnlgalt Wireshark 64bit includes outdated GTK library
Member 27th Dec, 2009 20:55
Ranking: 0
Posts: 7
User Since: 21st Feb, 2008
System Score: N/A
Location: N/A
Last edited on 27th Dec, 2009 21:09

Hi, everyone, I did a preliminary search for this issue and only found a couple of threads referring to Wireshark and the associated download links.

My issue is that the 64bit installer of Wireshark uses an older, outdated (and vulnerable) version of a GTK library file libgdk-win32-2.0-0.dll for which there is no update. The reason I say this is that the update points to the full version of the GTK installer, and upon opening the archive and finding the appropriate file name and replacing it in the path to Wireshark at C:\Program Files\Wireshark\ Wireshark ceases to function.

In addition, I went to the Wireshark ftp site and downloaded the latest nightly build (wireshark-win64-1.3.3-SVN-31363.exe as of yesterday when I attempted to fix the issue) and it is still using the same old DLL.

My system info:

Windows 7 Ultimate 64bit (RTM) fully patched
Wireshark 64bit (1.2.5 updated to 1.3.2 Beta updated to wireshark-win64-1.3.3-SVN-31363)

I have looked around for a 64bit compiled version of the library file, b/c the Secunia DL links to the 32bit GTK+ download, and found http://www.gtk.org/download-windows-64bit.html - where the latest GTK+ version is, in fact, the outdated and vulnerable 2.16.6

This is more of a heads up post than anything else for those folks that may also run into this issue.

EDIT: Added the following:

I found a similar thread relating to libgdk-win32-2.0-0.dll at http://secunia.com/community/forum/thread/show/226... that seems to only deal with the 32bit version, so I have posted in that thread linking to this post as well.

No one has replied to this thread yet - be the first
This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports & Papers
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2012 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability