CVE-2005-3243 Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.
HighCVSS 7.5
EPSS 10.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ethereal group ethereal | = 0.9.1 | No fix listed |
| ethereal group ethereal | = 0.9.2 | No fix listed |
| ethereal group ethereal | = 0.9.3 | No fix listed |
| ethereal group ethereal | = 0.9.4 | No fix listed |
| ethereal group ethereal | = 0.9.5 | No fix listed |
| ethereal group ethereal | = 0.9.6 | No fix listed |
| ethereal group ethereal | = 0.9.7 | No fix listed |
| ethereal group ethereal | = 0.9.8 | No fix listed |
| ethereal group ethereal | = 0.9.9 | No fix listed |
| ethereal group ethereal | = 0.9.10 | No fix listed |
| ethereal group ethereal | = 0.9.11 | No fix listed |
| ethereal group ethereal | = 0.9.12 | No fix listed |
| ethereal group ethereal | = 0.9.13 | No fix listed |
| ethereal group ethereal | = 0.9.14 | No fix listed |
| ethereal group ethereal | = 0.9.15 | No fix listed |
| ethereal group ethereal | = 0.9.16 | No fix listed |
| ethereal group ethereal | = 0.10.0 | No fix listed |
| ethereal group ethereal | = 0.10.1 | No fix listed |
| ethereal group ethereal | = 0.10.2 | No fix listed |
| ethereal group ethereal | = 0.10.3 | No fix listed |
| ethereal group ethereal | = 0.10.4 | No fix listed |
| ethereal group ethereal | = 0.10.5 | No fix listed |
| ethereal group ethereal | = 0.10.6 | No fix listed |
| ethereal group ethereal | = 0.10.7 | No fix listed |
| ethereal group ethereal | = 0.10.8 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ethereal group ethereal | = 0.10.9 | No fix listed |
| ethereal group ethereal | = 0.10.10 | No fix listed |
| ethereal group ethereal | = 0.10.11 | No fix listed |
| ethereal group ethereal | = 0.10.12 | No fix listed |
References
- 17254 third-party-advisory
- 17286 third-party-advisory
- 17327 third-party-advisory
- 17377 third-party-advisory
- 17392 third-party-advisory
- 17480 third-party-advisory
- 21813 third-party-advisory
- 1015082 vdb-entry
- DSA-1171 vendor-advisory
- www.ethereal.com patch url-repurposed
- www.frsirt.com
- GLSA-200510-25 vendor-advisory
- SUSE-SR:2005:025 vendor-advisory
- 20126 vdb-entry
- 20135 vdb-entry
- FLSA-2006:152922 vendor-advisory
- RHSA-2005:809 vendor-advisory
- 15148 vdb-entry
- oval:org.mitre.oval:def:9836 signature vdb-entry