CVE-2003-1013

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published: Jan 5, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-10147.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use mu CVE-2003-10157.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use wh CVE-2003-10167.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use ma CVE-2003-10175.0Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Intern CVE-2003-10187.2Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via un CVE-2003-10205.0The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash).CVE-2003-10217.2The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.CVE-2003-10227.5Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.CVE-2003-10237.5Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later ver CVE-2003-10247.2Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gai CVE-2003-10254.3Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user CVE-2003-10269.3Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which