CVE-2008-3146

Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application…

published September 2, 2008

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky multiple buffer overflow in Wireshark can crash the application or even let attackers run arbitrary code with just a crafted NCP packet! Think of it like a delivery service that accidentally punctures a critical package, causing the entire shipment to come crashing down. One wrong move with that packet and everything goes haywire! If exploited, this vulnerability could lead to a denial of service, causing Wireshark to crash unexpectedly. In more severe cases, it might even let attackers execute arbitrary code on the system, creating chaos for anyone relying on this vital network analysis tool.

Put simply

Think of it like a delivery service that accidentally punctures a critical package, causing the entire shipment to come crashing down. One wrong move with that packet and everything goes haywire! The root cause lies in the packet_ncp2222.inc file, where improper handling of crafted NCP packets leads to invalid pointer usage and potential memory corruption, paving the way for crashes and code execution.

What to do

If exploited, this vulnerability could lead to a denial of service, causing Wireshark to crash unexpectedly. In more severe cases, it might even let attackers execute arbitrary code on the system, creating chaos for anyone relying on this vital network analysis tool. To safeguard against this vulnerability, ensure you're running Wireshark version 1.0.3 or later. Regularly check for updates and apply them promptly to keep your network analysis tools secure. 🛡️ You've got this! By staying updated, you're already a step ahead in keeping your applications safe! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04036 · 90.5th percentile
Published
2008-09-02T14:00Z
EPSS history
Timeline
  • 02 SEP 14:00Z
    Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application…
    cvelistv5