Ethereal Denial of Service Vulnerability Affecting Multiple Dissector Components

CVE-2006-1937

What is CVE-2006-1937?

Ethereal versions 0.10.x through 0.10.14 are susceptible to a series of vulnerabilities that allow remote attackers to launch denial of service attacks. Exploiting this flaw might lead to crashes triggered by null dereference through multiple vectors involving H.248, X.509if, SRVLOC, H.245, AIM, and various other packet dissectors, as well as the statistics counter. Attackers can exploit these vulnerabilities to disrupt normal operation and availability of the software.

References