CVE-2011-3360
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
- Affected products
- Wireshark
- Wireshark
- = 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.4.8
- Fix
- Available
- CVSS 2.0
- 9.3 HIGH
- EPSS
- 34.9% (98th percentile)
- NVD status
- Modified
- Published
- 2011-09-20
CVE-2011-3360 at NVD
9 known exploits for CVE-2011-3360
Proof-of-concept code and exploit modules indexed by Sploitus
Wireshark Lua Untrusted Search Path vulnerability
Wireshark Lua Untrusted Search Path vulnerability
Wireshark Lua Untrusted Search Path vulnerability
Wireshark Lua Untrusted Search Path vulnerability
Wireshark 1.6 console.lua Pre-Load / Execution
Wireshark - console.lua pre-loading (Metasploit)
Wireshark console.lua pre-loading vulnerability
DSquare Exploit Pack: D2SEC_WIRESHARK
Wireshark console.lua Pre-Loading Script Execution