CVE-2006-1937

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) multiple vectors in H.248, and the (2) X.509if, (3) SRVLOC, (4) H.245, (5) AIM, and (6) general packet dissectors; and (7) the statistics counter.

Affected Software

Name	Vendor	Start Version	End Version
Ethereal	Ethereal_group	0.10 (including)	0.10 (including)
Ethereal	Ethereal_group	0.10.0 (including)	0.10.0 (including)
Ethereal	Ethereal_group	0.10.0a (including)	0.10.0a (including)
Ethereal	Ethereal_group	0.10.1 (including)	0.10.1 (including)
Ethereal	Ethereal_group	0.10.2 (including)	0.10.2 (including)
Ethereal	Ethereal_group	0.10.3 (including)	0.10.3 (including)
Ethereal	Ethereal_group	0.10.4 (including)	0.10.4 (including)
Ethereal	Ethereal_group	0.10.5 (including)	0.10.5 (including)
Ethereal	Ethereal_group	0.10.6 (including)	0.10.6 (including)
Ethereal	Ethereal_group	0.10.7 (including)	0.10.7 (including)
Ethereal	Ethereal_group	0.10.8 (including)	0.10.8 (including)
Ethereal	Ethereal_group	0.10.9 (including)	0.10.9 (including)
Ethereal	Ethereal_group	0.10.10 (including)	0.10.10 (including)
Ethereal	Ethereal_group	0.10.11 (including)	0.10.11 (including)
Ethereal	Ethereal_group	0.10.12 (including)	0.10.12 (including)
Ethereal	Ethereal_group	0.10.13 (including)	0.10.13 (including)
Red Hat Enterprise Linux 3	RedHat	ethereal-0:0.99.0-EL3.2	*
Ethereal	Ubuntu	dapper	*
Wireshark	Ubuntu	devel	*
Wireshark	Ubuntu	edgy	*
Wireshark	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-1937
CWE	https://cwe.mitre.org/data/definitions/.html

Affected Software

References