CVE-2005-3243

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-10-27 · updated 2026-06-16

Description

Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.

Affected products

Ethereal Group Ethereal: 0.9.1, 0.9.2, 0.9.3, 0.9.4, 0.9.5, 0.9.6 (+23)

References

http://secunia.com/advisories/17254
http://secunia.com/advisories/17286
http://secunia.com/advisories/17327
http://secunia.com/advisories/17377
http://secunia.com/advisories/17392
http://secunia.com/advisories/17480
http://secunia.com/advisories/21813
http://securitytracker.com/id?1015082
http://www.debian.org/security/2006/dsa-1171
http://www.ethereal.com/appnotes/enpa-sa-00021.html
http://www.frsirt.com/exploits/20051020.ethereal_slimp3_bof.py.php
http://www.gentoo.org/security/en/glsa/glsa-200510-25.xml

Get alerted when CVE-2005-3243 or the next vulnerability affects your stack