epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet related to the MMSE WAP WBXML and WSP dissectors.