CVE-2006-3628

Description

Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9175

https://issues.rpath.com/browse/RPL-512

https://exchange.xforce.ibmcloud.com/vulnerabilities/27828

https://exchange.xforce.ibmcloud.com/vulnerabilities/27825

https://exchange.xforce.ibmcloud.com/vulnerabilities/27824

https://exchange.xforce.ibmcloud.com/vulnerabilities/27823

https://exchange.xforce.ibmcloud.com/vulnerabilities/27822

http://www.wireshark.org/security/wnpa-sec-2006-01.html

http://www.vupen.com/english/advisories/2006/2850

http://www.securityfocus.com/bid/19051

http://www.securityfocus.com/archive/1/440576/100/0/threaded

http://www.osvdb.org/27369

http://www.osvdb.org/27364

http://www.osvdb.org/27363

http://www.osvdb.org/27362

http://www.novell.com/linux/security/advisories/2006_20_sr.html

http://www.mandriva.com/security/advisories?name=MDKSA-2006:128

http://www.debian.org/security/2006/dsa-1127

http://support.avaya.com/elmodocs2/security/ASA-2006-197.htm

http://securitytracker.com/id?1016532

http://security.gentoo.org/glsa/glsa-200607-09.xml

http://secunia.com/advisories/22089

http://secunia.com/advisories/21598

http://secunia.com/advisories/21488

http://secunia.com/advisories/21467

http://secunia.com/advisories/21249

http://secunia.com/advisories/21204

http://secunia.com/advisories/21121

http://secunia.com/advisories/21107

http://secunia.com/advisories/21078

http://rhn.redhat.com/errata/RHSA-2006-0602.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3