CVE-2016-6503

MEDIUM 5.9CVE-2016-6503 · Published 06/08/2016 · updated 17/06/2026

In short

CVE-2016-6503 is a MEDIUM (CVSS 5.9) vulnerability affecting wireshark (wireshark).
Chance of exploitation in the next 30 days (EPSS): 6.4%, higher than 93.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wireshark wireshark	`= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4`	No fix yet

Description

The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

References

openwall.com/lists/oss-security/2016/07/28/3 · Mailing List
securityfocus.com/bid/92162
securitytracker.com/id/1036480
wireshark.org/security/wnpa-sec-2016-39.html · Vendor Advisory
bugs.wireshark.org/bugzilla/show_bug.cgi · Issue Tracking
code.wireshark.org/review/gitweb
exploit-db.com/exploits/40196

More vulnerabilities in wireshark

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wireshark

= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4

No fix yet

More vulnerabilities in wireshark

See all →