CVE-2010-3133 Untrusted search path vulnerability in Wireshark 0.8.4 through 1.0.15 and 1.2.0 through 1.2.10 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking at...
HighCVSS 9.3
EPSS 8.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Untrusted search path vulnerability in Wireshark 0.8.4 through 1.0.15 and 1.2.0 through 1.2.10 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse airpcap.dll, and possibly other DLLs, that is located in the same folder as a file that automatically launches Wireshark.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wireshark | <= 1.2.10 | No fix listed |
| wireshark | = 0.99.2 | No fix listed |
| wireshark | = 0.99.3 | No fix listed |
| wireshark | = 0.99.4 | No fix listed |
| wireshark | = 0.99.5 | No fix listed |
| wireshark | = 0.99.6 | No fix listed |
| wireshark | = 0.99.7 | No fix listed |
| wireshark | = 0.99.8 | No fix listed |
| wireshark | = 1.0.0 | No fix listed |
| wireshark | = 1.0.1 | No fix listed |
| wireshark | = 1.0.2 | No fix listed |
| wireshark | = 1.0.3 | No fix listed |
| wireshark | = 1.0.4 | No fix listed |
| wireshark | = 1.0.5 | No fix listed |
| wireshark | = 1.0.6 | No fix listed |
| wireshark | = 1.0.7 | No fix listed |
| wireshark | = 1.0.8 | No fix listed |
| wireshark | = 1.0.9 | No fix listed |
| wireshark | = 1.0.10 | No fix listed |
| wireshark | = 1.0.11 | No fix listed |
| wireshark | = 1.0.12 | No fix listed |
| wireshark | = 1.2.0 | No fix listed |
| wireshark | = 1.2.1 | No fix listed |
| wireshark | = 1.2.2 | No fix listed |
| wireshark | = 1.2.3 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| wireshark | = 1.2.4 | No fix listed |
| wireshark | = 1.2.5 | No fix listed |
| wireshark | = 1.2.6 | No fix listed |
| wireshark | = 1.2.7 | No fix listed |
| wireshark | = 1.2.8 | No fix listed |
| wireshark | = 1.2.9 | No fix listed |
References
- 41064 third-party-advisory vendor-advisory
- 14721 exploit
- ADV-2010-2165 vdb-entry vendor-advisory
- ADV-2010-2243 vdb-entry
- www.wireshark.org vendor-advisory
- www.wireshark.org vendor-advisory
- oval:org.mitre.oval:def:11498 signature vdb-entry
- Debian Security Tracker CVE-2010-3133 vendor-advisory