The version of Wireshark installed on the remote Windows host is prior to 1.12.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.12 advisory.

  - epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles     offsets, which allows remote attackers to cause a denial of service (integer overflow and infinite loop)     via a crafted packet. (CVE-2016-5359)

  - epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x     before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service     (infinite loop) via a crafted packet. (CVE-2016-5350)

  - epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4     mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service     (application crash) via a crafted packet. (CVE-2016-5351)

  - epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x     before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service     (application crash) via a crafted packet. (CVE-2016-5353)

  - The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which     allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    (CVE-2016-5354)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 1.12.x < 1.12.12 Multiple Vulnerabilities

high Nessus Plugin ID 91820

Version 1.9

Version 1.8

Version 1.7

Version 1.9 Oct 7, 2026, 6:12 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610070612
Version 1.8 Mar 30, 2026, 9:17 PM Logic Changes (modernized plugin) Plugin Feed: 202603302117
Version 1.7 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354