CVE-2005-3184 Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Ethereal allows remote attackers to execute arbitrary code via a srvloc p...
HighCVSS 10.0
EPSS 7.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ethereal group ethereal | <= 0.10.12 | No fix listed |
References
- 17254 third-party-advisory
- 17286 third-party-advisory
- 17327 third-party-advisory
- 17377 third-party-advisory
- 17392 third-party-advisory
- 17480 third-party-advisory
- 1015082 vdb-entry
- www.ethereal.com url-repurposed
- GLSA-200510-25 vendor-advisory
- 20051020 Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability patch third-party-advisory vendor-advisory
- SUSE-SR:2005:025 vendor-advisory
- 20137 vdb-entry
- FLSA-2006:152922 vendor-advisory
- RHSA-2005:809 vendor-advisory
- 15148 vdb-entry
- 15158 vdb-entry
- oval:org.mitre.oval:def:10074 signature vdb-entry