CVE-2006-3628 Other in n/a
Remote attackers can cause denial of service or execute arbitrary code via format string vulnerabilities in multiple Wireshark protocol dissectors.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-3628?
CVE-2006-3628 is a critical vulnerability in Ethereal Group Ethereal, published on 18 Jul 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.
Weakness: CWE-134
Which versions are affected by CVE-2006-3628?
It affects 2 products.
Products include Ethereal Group Ethereal, Wireshark Wireshark.
How do I fix CVE-2006-3628?
Upgrade to a fixed version.
Is CVE-2006-3628 being exploited?
There is no known exploitation of CVE-2006-3628 in the wild and no public exploit code.
Other vulnerabilities in Ethereal Group Ethereal
Sources
Also known as DEBIAN-CVE-2006-3628, GHSA-mg6c-c5w2-g567.