CVE-2006-4574
- State
- Published
- Severity
- 7.5 High
- Published
- Oct 28, 2006
- Updated
- Jan 17, 2025
- Reserved
- Sep 6, 2006
Description
Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | CISA-ADP |
Weaknesses
- CWE-193 Off-by-one Error
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- wireshark-mime-dos(29844)vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm
- oval:org.mitre.oval:def:9740vdb-entrysignature
- 23096third-party-advisory
- http://www.wireshark.org/security/wnpa-sec-2006-03.html
- DSA-1201vendor-advisory
- https://issues.rpath.com/browse/RPL-746
- 22590third-party-advisory
- ADV-2006-4220vdb-entry
- 22841third-party-advisory
- 20762vdb-entry
- SUSE-SA:2006:065vendor-advisory
- RHSA-2006:0726vendor-advisory
- 22929third-party-advisory
- 20061101 rPSA-2006-0202-1 tshark wiresharkmailing-list
- 22659third-party-advisory
- 22692third-party-advisory
- MDKSA-2006:195vendor-advisory
- 1017129vdb-entry
- 22672third-party-advisory
- 22797third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.