The version of Wireshark installed on the remote Windows host is prior to 1.10.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.11 advisory.

  - The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in     Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of     service (infinite loop) via a crafted packet. (CVE-2014-8714)

  - The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark     1.10.x before 1.10.11 allows remote attackers to cause a denial of service (buffer over-read and     application crash) via a crafted packet. (CVE-2014-8710)

  - Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x     before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application     crash) via a crafted amqp_0_10 PDU in a packet. (CVE-2014-8711)

  - The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark     1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows     remote attackers to cause a denial of service (application crash) via a crafted packet. (CVE-2014-8712)

  - Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the     NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause     a denial of service (application crash) via a crafted packet. (CVE-2014-8713)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 1.10.x < 1.10.11 Multiple Vulnerabilities

high Nessus Plugin ID 79251

Version 1.9