The version of Wireshark installed on the remote Windows host is prior to 2.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.3 advisory.

  - Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x     before 2.0.3 allows remote attackers to cause a denial of service (integer overflow and application crash)     via a crafted packet that triggers an unexpected array size. (CVE-2016-4084)

  - epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree     depth, which allows remote attackers to cause a denial of service (stack memory consumption and     application crash) via a crafted packet. (CVE-2016-4006)

  - epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly     initialize memory for search patterns, which allows remote attackers to cause a denial of service     (application crash) via a crafted packet. (CVE-2016-4076)

  - epan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 relies on incorrect special-case handling of     truncated Tvb data structures, which allows remote attackers to cause a denial of service (use-after-free     and application crash) via a crafted packet. (CVE-2016-4077)

  - The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly     restrict element lists, which allows remote attackers to cause a denial of service (deep recursion and     application crash) via a crafted packet, related to epan/dissectors/packet-capwap.c and     epan/dissectors/packet-ieee80211.c. (CVE-2016-4078)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 2.0.x < 2.0.3 Multiple Vulnerabilities

medium Nessus Plugin ID 90787

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.12 Oct 9, 2026, 6:12 PM Plugin metadata Plugin Feed: 202610091812
Version 1.11 May 2, 2026, 1:15 AM CVSS metrics ("CVSSv3 score" set to 5.9) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv3 severity (based on manual, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605020115
Version 1.10 Mar 30, 2026, 9:17 PM Logic Changes (modernized plugin) Plugin Feed: 202603302117
Version 1.9 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354