CVE-2005-3243 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 10.8% (pctl 96)
Patch early
A public exploit exists.
Description
Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 10.83% — more likely to be exploited than 96% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-10-27 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| ethereal group | ethereal |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Ethereal 0.9.1 < 0.10.12 SLIMP3 - Remote Buffer Overflow (PoC) | 2005-10-20 |
References
- http://secunia.com/advisories/17254
- http://secunia.com/advisories/17286
- http://secunia.com/advisories/17327
- http://secunia.com/advisories/17377
- http://secunia.com/advisories/17392
- http://secunia.com/advisories/17480
- http://secunia.com/advisories/21813
- http://securitytracker.com/id?1015082
- http://www.debian.org/security/2006/dsa-1171
- http://www.ethereal.com/appnotes/enpa-sa-00021.html
- http://www.frsirt.com/exploits/20051020.ethereal_slimp3_bof.py.php
- http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml
- http://www.novell.com/linux/security/advisories/2005_25_sr.html
- http://www.osvdb.org/20126
- http://www.osvdb.org/20135
- http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html
- http://www.redhat.com/support/errata/RHSA-2005-809.html
- http://www.securityfocus.com/bid/15148
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9836
- http://secunia.com/advisories/17254
→ the Explorer · watch your stack · NVD