The version of Wireshark installed on the remote Windows host is prior to 1.12.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.10 advisory.

  - Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp     in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges     via a Trojan horse riched20.dll.dll file in the current working directory, related to use of QLibrary.
    (CVE-2016-2521)

  - The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark     1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service     (infinite loop) via a crafted packet. (CVE-2016-2523)

  - The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark     1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an unrecognized TLV type, which allows     remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted     packet, a different vulnerability than CVE-2016-2531. (CVE-2016-2530)

  - Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10     and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and     application crash) via a crafted packet that triggers a 0xff tag value, a different vulnerability than     CVE-2016-2530. (CVE-2016-2531)

  - The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark     1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows remote     attackers to cause a denial of service (memory consumption or application crash) via a crafted packet.
    (CVE-2016-2532)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.2 advisory.

  - Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp     in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges     via a Trojan horse riched20.dll.dll file in the current working directory, related to use of QLibrary.
    (CVE-2016-2521)

  - The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 allows local     users to bypass the ASLR protection mechanism via a crafted application, aka Kernel ASLR Bypass     Vulnerability. (CVE-2015-2529)

  - The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector     in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote     attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    (CVE-2016-2522)

  - The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark     1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service     (infinite loop) via a crafted packet. (CVE-2016-2523)

  - epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the     algorithm ID, which allows remote attackers to cause a denial of service (application crash) via a crafted     packet. (CVE-2016-2524)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
89103	Wireshark 1.12.x < 1.12.10 Multiple Vulnerabilities	Nessus	Windows	2016/3/3	2026/10/7	high
89102	Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2016/3/3	2026/10/21	high

检测

插件搜索

high

high