CVE-2005-1462

Ethereal < 0.10.11 - Remote Code Execution via ICEP Dissector Double Free

Title source: llm
STIX 2.1

Description

Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.

References (7)

Core 7
Core References
Patch, Vendor Advisory, URL Repurposed x_refsource_confirm
http://www.ethereal.com/appnotes/enpa-sa-00019.html
Patch, Vendor Advisory, URL Repurposed x_refsource_confirm
http://www.ethereal.com/news/item_20050504_01.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-427.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13504
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9713
Vendor Advisory vendor-advisory x_refsource_conectiva
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963

Scores

EPSS 0.0320
EPSS Percentile 86.7%

Details

CWE
CWE-119
Status published
Products (34)
ethereal_group/ethereal 0.8
ethereal_group/ethereal 0.8.13
ethereal_group/ethereal 0.8.14
ethereal_group/ethereal 0.8.15
ethereal_group/ethereal 0.8.18
ethereal_group/ethereal 0.8.19
ethereal_group/ethereal 0.9
ethereal_group/ethereal 0.9.1
ethereal_group/ethereal 0.9.2
ethereal_group/ethereal 0.9.3
... and 24 more
Published May 05, 2005
Tracked Since Feb 18, 2026