CVE-2005-3243

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 11%

from disclosure to weapon0 days

Published on NVDOct 27

1st PoCOct 20

exploitation probability

11%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1266

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/17254 http://secunia.com/advisories/17286 http://secunia.com/advisories/17327 http://secunia.com/advisories/17377 http://secunia.com/advisories/17392 http://secunia.com/advisories/17480 http://secunia.com/advisories/21813 http://securitytracker.com/id?1015082 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9836 http://www.debian.org/security/2006/dsa-1171 http://www.ethereal.com/appnotes/enpa-sa-00021.html http://www.frsirt.com/exploits/20051020.ethereal_slimp3_bof.py.php