CVE-2011-3360

Description

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.

Risk Information

Base Score
8.4
MODERATE
Vector
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
65.771

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Wireshark (X64) 1.6.1Windows
Multiple vulnerabilities affected in Wireshark 1.6.1Windows
Multiple Vulnerabilities are affected in Wireshark (X64) 1.4.0Windows
Multiple Vulnerabilities are affected in Wireshark (X64) 1.4.1Windows
Multiple Vulnerabilities are affected in Wireshark (X64) 1.4.2Windows
Multiple Vulnerabilities are affected in Wireshark (X64) 1.4.3Windows
Multiple Vulnerabilities are affected in Wireshark 1.4.0Windows
Multiple Vulnerabilities are affected in Wireshark 1.4.1Windows
Multiple Vulnerabilities are affected in Wireshark 1.4.2Windows
Multiple Vulnerabilities are affected in Wireshark 1.4.3Windows
Multiple Vulnerabilities are affected in Wireshark (X64) 1.4.4Windows
Multiple Vulnerabilities are affected in Wireshark 1.4.4Windows
Multiple Vulnerabilities are affected in Wireshark (X64) 1.4.5Windows
Multiple Vulnerabilities are affected in Wireshark 1.4.5Windows
Multiple Vulnerabilities are affected in Wireshark (X64) 1.4.6Windows
Multiple Vulnerabilities are affected in Wireshark (X64) 1.4.7Windows
Multiple Vulnerabilities are affected in Wireshark (X64) 1.6.0Windows
Multiple Vulnerabilities are affected in Wireshark (X64) 1.4.8Windows
Multiple Vulnerabilities are affected in Wireshark (X64) 1.6.1Windows
Multiple Vulnerabilities are affected in Wireshark 1.4.6Windows
Multiple Vulnerabilities are affected in Wireshark 1.4.7Windows
Multiple Vulnerabilities are affected in Wireshark 1.4.8Windows
Multiple Vulnerabilities are affected in Wireshark 1.6.0Windows
Multiple Vulnerabilities are affected in Wireshark 1.6.1Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-343288Wireshark (X64) (4.4.2)
PATCH-338541Wireshark (3.6.24)
PATCH-352320Wireshark (X64) (4.6.0)
PATCH-352320Wireshark (X64) (4.6.0)
PATCH-352320Wireshark (X64) (4.6.0)
PATCH-352320Wireshark (X64) (4.6.0)
PATCH-338541Wireshark (3.6.24)
PATCH-338541Wireshark (3.6.24)
PATCH-338541Wireshark (3.6.24)
PATCH-338541Wireshark (3.6.24)
PATCH-352320Wireshark (X64) (4.6.0)
PATCH-338541Wireshark (3.6.24)
PATCH-352320Wireshark (X64) (4.6.0)
PATCH-338541Wireshark (3.6.24)
PATCH-352320Wireshark (X64) (4.6.0)
PATCH-352320Wireshark (X64) (4.6.0)
PATCH-352320Wireshark (X64) (4.6.0)
PATCH-352320Wireshark (X64) (4.6.0)
PATCH-352320Wireshark (X64) (4.6.0)
PATCH-338541Wireshark (3.6.24)
PATCH-338541Wireshark (3.6.24)
PATCH-338541Wireshark (3.6.24)
PATCH-338541Wireshark (3.6.24)
PATCH-338541Wireshark (3.6.24)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234