CyberSec.Space Logo
Back to CVE Browser

CVE-2006-3628

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1520%
EPSS Percentile11.25th
PublishedJul 21, 2006
Last ModifiedApr 16, 2026

Vulnerability Description

Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.

Affected Platforms (CPE)

📦
Ethereal Group

Ethereal

= 0.10
📦
Ethereal Group

Ethereal

= 0.10.0
📦
Ethereal Group

Ethereal

= 0.10.0a
📦
Ethereal Group

Ethereal

= 0.10.1
📦
Ethereal Group

Ethereal

= 0.10.2
📦
Ethereal Group

Ethereal

= 0.10.3
📦
Ethereal Group

Ethereal

= 0.10.4
📦
Ethereal Group

Ethereal

= 0.10.5
📦
Ethereal Group

Ethereal

= 0.10.6
📦
Ethereal Group

Ethereal

= 0.10.7
📦
Ethereal Group

Ethereal

= 0.10.8
📦
Ethereal Group

Ethereal

= 0.10.9
📦
Ethereal Group

Ethereal

= 0.10.10
📦
Ethereal Group

Ethereal

= 0.10.11
📦
Ethereal Group

Ethereal

= 0.10.12
📦
Ethereal Group

Ethereal

= 0.10.13
📦
Ethereal Group

Ethereal

= 0.10.14
📦
Ethereal Group

Ethereal

= 0.99.0
📦
Wireshark

Wireshark

= 0.10
📦
Wireshark

Wireshark

= 0.10.4
📦
Wireshark

Wireshark

= 0.10.13
📦
Wireshark

Wireshark

= 0.99
📦
Wireshark

Wireshark

= 0.99.1

References & Advisories

🔗 ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P
🔗 http://rhn.redhat.com/errata/RHSA-2006-0602.html
🔗 http://secunia.com/advisories/21078
🔗 http://secunia.com/advisories/21107
🔗 http://secunia.com/advisories/21121
🔗 http://secunia.com/advisories/21204
🔗 http://secunia.com/advisories/21249
🔗 http://secunia.com/advisories/21467

Related Vulnerabilities

CVE-2003-043210.0

Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS,...

CVE-2004-050710.0

Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possi...

CVE-2003-043110.0

The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown con...

CVE-2005-318410.0

Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Eth...