Integer Underflow Vulnerability in Ettercap from the Vendor

CVE-2014-9376

What is CVE-2014-9376?

An integer underflow in Ettercap version 0.8.1 poses significant risks by allowing remote attackers to exploit specific functions within the application. Attackers may use carefully crafted input to trigger an out-of-bounds write, resulting in a denial of service. This vulnerability is present in the dissector_dhcp function, the dissector_gg function, the get_decode_len function, and the dissector_TN3270 function, where inadequate validation of input values can lead to critical issues, including potential arbitrary code execution.

References