CVE Database
/

CVE-2008-3146

Back to search

CVE-2008-3146

Published: Sep 2, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used.

VendorProductVersions

n/a

n/a

affected
n/a

References

SUSE-SR:2008:017
vendor-advisory
x_refsource_SUSE
FEDORA-2008-7936
vendor-advisory
x_refsource_FEDORA
RHSA-2008:0890
vendor-advisory
x_refsource_REDHAT
31864
third-party-advisory
x_refsource_SECUNIA
31687
third-party-advisory
x_refsource_SECUNIA
20080917 rPSA-2008-0278-1 tshark wireshark
mailing-list
x_refsource_BUGTRAQ
32091
third-party-advisory
x_refsource_SECUNIA
ADV-2008-2773
vdb-entry
x_refsource_VUPEN
1020819
vdb-entry
x_refsource_SECTRACK
FEDORA-2008-7894
vendor-advisory
x_refsource_FEDORA
oval:org.mitre.oval:def:10624
vdb-entry
signature
x_refsource_OVAL
MDVSA-2008:199
vendor-advisory
x_refsource_MANDRIVA
GLSA-200809-17
vendor-advisory
x_refsource_GENTOO
31886
third-party-advisory
x_refsource_SECUNIA
32028
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now