Vulnerability in Wireshark
CVE-2011-3360
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
EPSS: 0.650 (98.5th percentile) — read the EPSS interpretation.
Affected products
- Wireshark — versions 1.4.0, 1.4.1, 1.4.2
- N/a — versions n/a
Public proof-of-concept exploits
References
- DSA-2324 (vendor-advisory, x_refsource_DEBIAN)
- [oss-security] 20110914 Re: CVE Request: Multiple issues fixed in wireshark 1.6.2 (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (x_refsource_CONFIRM)
- 75347 (x_refsource_OSVDB, vdb-entry)
- MDVSA-2011:138 (vendor-advisory, x_refsource_MANDRIVA)
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
- oval:org.mitre.oval:def:15059 (x_refsource_OVAL, signature, vdb-entry)
- [oss-security] 20110913 CVE Request: Multiple issues fixed in wireshark 1.6.2 (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2011-3360?
- CVE-2011-3360 is a vulnerability in Wireshark. Published 2011-09-20.
- Is CVE-2011-3360 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.