Secunia
|
|

|
|
|
|
|
|
|
|
|
|
|
|
| johnlgalt | Wireshark 64bit includes outdated GTK library |
|---|---|
|
27th Dec, 2009 20:55 |
|
Ranking: 0 Posts: 7 User Since: 21st Feb, 2008 System Score: N/A Location: N/A Last edited on 27th Dec, 2009 21:09 |
Hi, everyone, I did a preliminary search for this issue and only found a couple of threads referring to Wireshark and the associated download links. My issue is that the 64bit installer of Wireshark uses an older, outdated (and vulnerable) version of a GTK library file libgdk-win32-2.0-0.dll for which there is no update. The reason I say this is that the update points to the full version of the GTK installer, and upon opening the archive and finding the appropriate file name and replacing it in the path to Wireshark at C:\Program Files\Wireshark\ Wireshark ceases to function. In addition, I went to the Wireshark ftp site and downloaded the latest nightly build (wireshark-win64-1.3.3-SVN-31363.exe as of yesterday when I attempted to fix the issue) and it is still using the same old DLL. My system info: Windows 7 Ultimate 64bit (RTM) fully patched Wireshark 64bit (1.2.5 updated to 1.3.2 Beta updated to wireshark-win64-1.3.3-SVN-31363) I have looked around for a 64bit compiled version of the library file, b/c the Secunia DL links to the 32bit GTK+ download, and found http://www.gtk.org/download-windows-64bit.html - where the latest GTK+ version is, in fact, the outdated and vulnerable 2.16.6 This is more of a heads up post than anything else for those folks that may also run into this issue. EDIT: Added the following: I found a similar thread relating to libgdk-win32-2.0-0.dll at http://secunia.com/community/forum/thread/show/226... that seems to only deal with the 32bit version, so I have posted in that thread linking to this post as well. |
Not a customer already?Learn more about how our market leading Vulnerability Management solutions can help you manage risk and ensure compliance. |