The version of Wireshark installed on the remote Windows host is prior to 1.6.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.10 advisory.

  - Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the     GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to     execute arbitrary code via a malformed packet. (CVE-2012-4297)

  - The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x     before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of     service (divide-by-zero error and application crash) via a zero-length message. (CVE-2012-4285)

  - Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in     Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to     cause a denial of service (loop or application crash) via a large value for a span length. (CVE-2012-4288)

  - epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10,     and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via     a large number of ACL entries. (CVE-2012-4289)

  - The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows     remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.
    (CVE-2012-4290)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 1.6.x < 1.6.10 Multiple Vulnerabilities

high Nessus Plugin ID 61572

Version 1.11