Ethereal Group » Ethereal » 0.9.11 : Security Vulnerabilities, CVEs, (Code Execution)
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
Max CVSS
10.0
EPSS Score
3.81%
Published
2006-07-21
Updated
2018-10-18
Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.
Max CVSS
7.5
EPSS Score
3.06%
Published
2005-12-10
Updated
2017-10-11
Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.
Max CVSS
7.5
EPSS Score
12.46%
Published
2005-10-27
Updated
2017-10-11
Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value.
Max CVSS
10.0
EPSS Score
8.27%
Published
2005-10-20
Updated
2017-10-11
Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
Max CVSS
7.5
EPSS Score
3.35%
Published
2005-05-05
Updated
2017-10-11
Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
Max CVSS
7.5
EPSS Score
4.61%
Published
2005-05-05
Updated
2017-10-11
Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIX_Qualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Max CVSS
7.5
EPSS Score
6.61%
Published
2005-05-05
Updated
2017-10-11
Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet.
Max CVSS
7.5
EPSS Score
3.58%
Published
2005-05-02
Updated
2017-10-11
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
Max CVSS
5.0
EPSS Score
93.28%
Published
2004-05-04
Updated
2017-10-11
Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SOCKS dissector.
Max CVSS
7.5
EPSS Score
2.26%
Published
2003-12-01
Updated
2017-10-11
Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string.
Max CVSS
7.5
EPSS Score
2.26%
Published
2003-12-01
Updated
2017-10-11
The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.
Max CVSS
7.5
EPSS Score
2.93%
Published
2003-07-24
Updated
2017-10-11
Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) Mount and (2) PPP dissectors.
Max CVSS
7.5
EPSS Score
9.69%
Published
2003-06-09
Updated
2017-10-11
13 vulnerabilities found