CVE-2006-4805

CVE-2006-4805 describes a denial-of-service vulnerability in Wireshark (formerly Ethereal) versions 0.9.8 through 0.99.3. Specifically, the XOT dissector's dissect_xot_pdu function can be exploited by remote attackers sending a specially crafted, encoded XOT packet that decodes to a zero-length value, leading to excessive memory consumption and a crash. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It can be exploited remotely with low attack complexity and no authentication, resulting in a denial of service (availability impact). There is no impact on confidentiality or integrity. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.