Ethereal Mount dissector integer overflow
by Mario Miri on May 16th, 2003 The Mount dissector of Ethereal is prone to an integer overflow vulnerability.
Vulnerable:
Ethereal Group Ethereal 0.8
Ethereal Group Ethereal 0.8.18
Ethereal Group Ethereal 0.9 .0
Ethereal Group Ethereal 0.9.1
Ethereal Group Ethereal 0.9.2
Ethereal Group Ethereal 0.9.3
Ethereal Group Ethereal 0.9.4
Ethereal Group Ethereal 0.9.5
Ethereal Group Ethereal 0.9.6
Ethereal Group Ethereal 0.9.7
Ethereal Group Ethereal 0.9.8
Ethereal Group Ethereal 0.9.9
Ethereal Group Ethereal 0.9.10
Ethereal Group Ethereal 0.9.11
Solution:
Versions 0.9.12 is not prone to this vulnerability:
http://www.ethereal.com/distribution/ethereal-0.9.12.tar.gz
Discovered by:
Timo Sirainen