CVE-2006-4574 Integer overflow in n/a

High 7.5 Published 28 Oct 2006 Updated 17 Jan 2025

Remote attackers can cause a denial of service crash in Wireshark via an off-by-one error in the MIME Multipart dissector.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2006-4574?

CVE-2006-4574 is a high-severity vulnerability in Wireshark Wireshark, published on 28 Oct 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values.

Weakness: CWE-617, CWE-193

Which versions are affected by CVE-2006-4574?

It affects 1 product.

Products include Wireshark Wireshark.

How do I fix CVE-2006-4574?

Upgrade to a fixed version.

Is CVE-2006-4574 being exploited?

There is no known exploitation of CVE-2006-4574 in the wild and no public exploit code.

All Wireshark Wireshark vulnerabilities

Sources

Also known as DEBIAN-CVE-2006-4574, GHSA-cjqf-4m3m-v7rh.