The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 allows remote attackers to cause a denial of service (integer overflow and application crash) via a crafted packet that triggers an unexpected array size.
Base Score: 4.3
Impact Score: 2.9
Exploitability Score: 8.6
Base Score: 5.9
Impact Score: 3.6
Exploitability Score: 2.2
|90846||FreeBSD : wireshark -- multiple vulnerabilities (7e36c369-10c0-11e6-94fa-002590263bf5)||Nessus||FreeBSD Local Security Checks|
|90787||Wireshark 2.0.x < 2.0.3 Multiple DoS||Nessus||Windows|
|90785||Wireshark 2.0.x < 2.0.3 Multiple DoS (Mac OS X)||Nessus||MacOS X Local Security Checks|