CVE-2011-3360 Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
HighCVSS 9.3
EPSS 34.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/wireshark(Debian:12) | < 1.6.2-1 | 1.6.2-1 |
| debian/wireshark(Debian:13) | < 1.6.2-1 | 1.6.2-1 |
| debian/wireshark(Debian:14) | < 1.6.2-1 | 1.6.2-1 |
| wireshark | = 1.4.0 | No fix listed |
| wireshark | = 1.4.1 | No fix listed |
| wireshark | = 1.4.2 | No fix listed |
| wireshark | = 1.4.3 | No fix listed |
| wireshark | = 1.4.4 | No fix listed |
| wireshark | = 1.4.5 | No fix listed |
| wireshark | = 1.4.6 | No fix listed |
| wireshark | = 1.4.7 | No fix listed |
| wireshark | = 1.4.8 | No fix listed |
| wireshark | = 1.6.0 | No fix listed |
| wireshark | = 1.6.1 | No fix listed |
References
- Debian Security Tracker CVE-2011-3360 vendor-advisory
- 75347 vdb-entry
- DSA-2324 vendor-advisory
- MDVSA-2011:138 vendor-advisory
- [oss-security] 20110913 CVE Request: Multiple issues fixed in wireshark 1.6.2 mailing-list
- [oss-security] 20110914 Re: CVE Request: Multiple issues fixed in wireshark 1.6.2 mailing-list
- www.wireshark.org vendor-advisory
- bugs.wireshark.org
- bugzilla.redhat.com
- oval:org.mitre.oval:def:15059 signature vdb-entry