Vulnerability in Ethereal Group
CVE-2002-1356
Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.
EPSS: 0.029 (85.5th percentile) — read the EPSS interpretation.
Affected products
- Ethereal_group Ethereal
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, URL Repurposed)
- cve@mitre.org (x_refsource_CONFIRM, URL Repurposed, Patch, Vendor Advisory)