Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Ethereal Multiple Protocol Dissector Vulnerabilities

Many vulnerabilities in Ethereal have been disclosed by the vendor. The reported issues are in various protocol dissectors.

These issues include:

- Buffer-overflow vulnerabilities
- Format-string vulnerabilities
- NULL-pointer dereference denial-of-service vulnerabilities
- Infinite-loop denial-of-service vulnerabilities
- Memory-exhaustion denial-of-service vulnerabilities
- Unspecified denial-of-service vulnerabilities

These issues could allow remote attackers to execute arbitrary machine code in the context of the vulnerable application. Attackers could also crash the affected application.

Various vulnerabilities affect several versions of Ethereal, from 0.8.5 through to 0.10.11.







 

Privacy Statement
Copyright 2009, SecurityFocus