Buffer Overflow Vulnerability in Ettercap GTK by the Vendor Ettercap
CVE-2010-3843

7.8HIGH

Key Information:

Vendor: Ettercap-project
Status: Ettercap
Vendor: CVE Published:; 28 May 2021

🔔 Create Ettercap-project Vulnerability Alert

What is CVE-2010-3843?

The GTK version of Ettercap is vulnerable due to its handling of a global settings file located at /tmp/.ettercap_gtk. The application fails to verify the ownership of this file before parsing it. As a result, an unchecked sscanf() call can lead to a stack buffer overflow when a malicious user crafts a settings file, potentially allowing the execution of arbitrary code. This vulnerability poses a serious risk to the integrity and confidentiality of user systems utilizing the affected versions of Ettercap GTK.