CyberSec.Space Logo
Back to CVE Browser

CVE-2008-3146

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0700%
EPSS Percentile40.78th
PublishedSep 2, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used.

Affected Platforms (CPE)

📦
Wireshark

Wireshark

= 0.9.7
📦
Wireshark

Wireshark

= 0.9.8
📦
Wireshark

Wireshark

= 0.99
📦
Wireshark

Wireshark

= 0.99.0
📦
Wireshark

Wireshark

= 0.99.1
📦
Wireshark

Wireshark

= 0.99.2
📦
Wireshark

Wireshark

= 0.99.3
📦
Wireshark

Wireshark

= 0.99.4
📦
Wireshark

Wireshark

= 0.99.5
📦
Wireshark

Wireshark

= 0.99.6
📦
Wireshark

Wireshark

= 0.99.6a
📦
Wireshark

Wireshark

= 0.99.7
📦
Wireshark

Wireshark

= 0.99.8
📦
Wireshark

Wireshark

= 1.0
📦
Wireshark

Wireshark

= 1.0.0
📦
Wireshark

Wireshark

= 1.0.1
📦
Wireshark

Wireshark

= 1.0.2

References & Advisories

🔗 http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2675
🔗 http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
🔗 http://secunia.com/advisories/31687
🔗 http://secunia.com/advisories/31864
🔗 http://secunia.com/advisories/31886
🔗 http://secunia.com/advisories/32028
🔗 http://secunia.com/advisories/32091
🔗 http://security.gentoo.org/glsa/glsa-200809-17.xml

Related Vulnerabilities

CVE-2007-611210.0

Buffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (cr...

CVE-2006-363210.0

Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly exe...

CVE-2006-362810.0

Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of se...

CVE-2007-611410.0

Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of servi...