CVE-2008-3146

wireshark: multiple buffer overflows in NCP dissector

Published Sep 2, 2008 CVSS 2.0 · 10.0 Critical EPSS 4.0% KEV · Not listed
Description
Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2008-3136 Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 9:28 AM
Reserved
Jul 10, 2008, 12:00 AM
Status
Modified
Published
Sep 2, 2008, 2:24 PM
Modified
Jun 16, 2026, 10:55 PM
Severity
Moderate
Public date
Sep 3, 2008, 12:00 AM