CVE-2006-3630 Integer overflow in n/a
Off-by-one errors in Wireshark dissectors allow remote attackers to cause denial of service or potentially execute code via crafted network packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-3630?
CVE-2006-3630 is a high-severity vulnerability in Wireshark Wireshark, published on 18 Jul 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.
Weakness: CWE-189
Which versions are affected by CVE-2006-3630?
It affects 1 product.
Products include Wireshark Wireshark.
How do I fix CVE-2006-3630?
Upgrade to a fixed version.
Is CVE-2006-3630 being exploited?
There is no known exploitation of CVE-2006-3630 in the wild and no public exploit code.
Other vulnerabilities in Wireshark Wireshark
Sources
Also known as DEBIAN-CVE-2006-3630, GHSA-xhvg-9hv8-ff9r.