CVE-2006-3628
Fixed in a distro release EPSS 6%
Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.
Products: ethereal_group ethereal, wireshark
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wireshark | 0.99.2-1 |
| Debian 13 | wireshark | 0.99.2-1 |
| Debian 14 | wireshark | 0.99.2-1 |
| Debian 3.1 | ethereal | 0.10.10-2sarge6 |
| Red Hat Enterprise Linux 3 | wireshark | 0:0.99.2-EL3.1 |
| Red Hat Enterprise Linux 3 | wireshark-debuginfo | 0:0.99.2-EL3.1 |
| Red Hat Enterprise Linux 3 | wireshark-gnome | 0:0.99.2-EL3.1 |
| Red Hat Enterprise Linux 4 | wireshark | 0:0.99.2-EL4.1 |
| Red Hat Enterprise Linux 4 | wireshark-debuginfo | 0:0.99.2-EL4.1 |
| Red Hat Enterprise Linux 4 | wireshark-gnome | 0:0.99.2-EL4.1 |