CVEvulnerability

CVE-2005-2367

7.5 HIGH Published 2005-08-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-08-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.

Affected configurations

• ethereal group ethereal 0.9.4 • ethereal group ethereal 0.9.5 • ethereal group ethereal 0.9.6 • ethereal group ethereal 0.9.7 • ethereal group ethereal 0.9.8 • ethereal group ethereal 0.9.9 • ethereal group ethereal 0.9.10 • ethereal group ethereal 0.9.11 • ethereal group ethereal 0.9.12 • ethereal group ethereal 0.9.13 • ethereal group ethereal 0.9.14 • ethereal group ethereal 0.9.15 • ethereal group ethereal 0.9.16 • ethereal group ethereal 0.10.0 • ethereal group ethereal 0.10.1 • ethereal group ethereal 0.10.2 • ethereal group ethereal 0.10.3 • ethereal group ethereal 0.10.4 • ethereal group ethereal 0.10.5 • ethereal group ethereal 0.10.6 • ethereal group ethereal 0.10.7 • ethereal group ethereal 0.10.8 • ethereal group ethereal 0.10.9 • ethereal group ethereal 0.10.10 • ethereal group ethereal 0.10.11

References