Ethereal 0.9.7 and previous versions allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ethereal group ethereal |