The version of Wireshark installed on the remote Windows host is prior to 2.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.4 advisory.

  - epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the     packet-header data type, which allows remote attackers to cause a denial of service (application crash)     via a crafted packet. (CVE-2016-5358)

  - epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x     before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service     (infinite loop) via a crafted packet. (CVE-2016-5350)

  - epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4     mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service     (application crash) via a crafted packet. (CVE-2016-5351)

  - epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length     values, which allows remote attackers to cause a denial of service (application crash) via a crafted     packet. (CVE-2016-5352)

  - epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x     before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service     (application crash) via a crafted packet. (CVE-2016-5353)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 2.0.x < 2.0.4 Multiple Vulnerabilities

high Nessus Plugin ID 91821

Version 1.10