CVE-2003-1013

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000801Broken Link
http://secunia.com/advisories/10531Broken Link
http://secunia.com/advisories/10568Broken Link
http://secunia.com/advisories/10570Broken Link
http://www.debian.org/security/2003/dsa-407Broken Link
http://www.ethereal.com/appnotes/enpa-sa-00012.htmlBroken Link, Patch, Vendor Advisory, URL Repurposed
http://www.mandriva.com/security/advisories?name=MDKSA-2004:002Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2004-001.htmlBroken Link, Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-002.htmlBroken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10097Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A857Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000801Broken Link
http://secunia.com/advisories/10531Broken Link
http://secunia.com/advisories/10568Broken Link
http://secunia.com/advisories/10570Broken Link
http://www.debian.org/security/2003/dsa-407Broken Link
http://www.ethereal.com/appnotes/enpa-sa-00012.htmlBroken Link, Patch, Vendor Advisory, URL Repurposed
http://www.mandriva.com/security/advisories?name=MDKSA-2004:002Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2004-001.htmlBroken Link, Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-002.htmlBroken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10097Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A857Broken Link

Timeline

Published: Jan 5, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-10147.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use mu CVE-2003-10157.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use wh CVE-2003-10167.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use ma CVE-2003-10175.0Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Intern CVE-2003-10187.2Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via un CVE-2003-10205.0The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash).CVE-2003-10217.2The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.CVE-2003-10227.5Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.CVE-2003-10237.5Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later ver CVE-2003-10247.2Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gai CVE-2003-10254.3Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user CVE-2003-10269.3Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which