CVE-2006-4574

security flaw

Published Oct 28, 2006 CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed
Description
Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1201-1 New ethereal packages fix denial of service
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Jan 17, 2025, 2:05 PM
Reserved
Sep 6, 2006, 12:00 AM
Status
Modified
Published
Oct 28, 2006, 12:07 AM
Modified
Jun 16, 2026, 10:29 PM
Severity
Moderate
Public date
Oct 30, 2006, 12:00 AM