CVE-2011-3360

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

34.51% chance of exploitation in the next 30 days, 98th percentile

Published

2011-09-20

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/wireshark_lua.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18125

Security advisories

• http://www.wireshark.org/security/wnpa-sec-2011-15.html
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:138

References

• CVE Record
• NVD entry