CVE-2006-3628: Ethereal Group Ethereal

High severity, CVSS 10.0. EPSS: 6% chance of exploitation in the next 30 days.

Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.

Affected products

• Ethereal Group Ethereal: version 0.10 only; version 0.10.0 only; version 0.10.0a only; version 0.10.1 only; version 0.10.2 only; version 0.10.3 only; …
• Wireshark Wireshark: version 0.10 only; version 0.10.4 only; version 0.10.13 only; version 0.99 only; version 0.99.1 only

Published 2006-07-21. Last modified 2026-06-16.