Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-3133

Untrusted search path vulnerability in Wireshark 0.8.4 through 1.0.15 and 1.2.0 through 1.2.10 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse airpcap.dll, and possibly other DLLs, that is located in the same folder as a file that automatically launches Wireshark.

Published

2010-08-26T18:36:36.013

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	wireshark	wireshark	≤ 1.2.10	Yes
Application	wireshark	wireshark	0.99.2	Yes
Application	wireshark	wireshark	0.99.3	Yes
Application	wireshark	wireshark	0.99.4	Yes
Application	wireshark	wireshark	0.99.5	Yes
Application	wireshark	wireshark	0.99.6	Yes
Application	wireshark	wireshark	0.99.7	Yes
Application	wireshark	wireshark	0.99.8	Yes
Application	wireshark	wireshark	1.0.0	Yes
Application	wireshark	wireshark	1.0.1	Yes
Application	wireshark	wireshark	1.0.2	Yes
Application	wireshark	wireshark	1.0.3	Yes
Application	wireshark	wireshark	1.0.4	Yes
Application	wireshark	wireshark	1.0.5	Yes
Application	wireshark	wireshark	1.0.6	Yes
Application	wireshark	wireshark	1.0.7	Yes
Application	wireshark	wireshark	1.0.8	Yes
Application	wireshark	wireshark	1.0.9	Yes
Application	wireshark	wireshark	1.0.10	Yes
Application	wireshark	wireshark	1.0.11	Yes
Application	wireshark	wireshark	1.0.12	Yes
Application	wireshark	wireshark	1.2.0	Yes
Application	wireshark	wireshark	1.2.1	Yes
Application	wireshark	wireshark	1.2.2	Yes
Application	wireshark	wireshark	1.2.3	Yes
Application	wireshark	wireshark	1.2.4	Yes
Application	wireshark	wireshark	1.2.5	Yes
Application	wireshark	wireshark	1.2.6	Yes
Application	wireshark	wireshark	1.2.7	Yes
Application	wireshark	wireshark	1.2.8	Yes
Application	wireshark	wireshark	1.2.9	Yes

References

http://secunia.com/advisories/41064 Vendor Advisory ([email protected])
http://www.exploit-db.com/exploits/14721/ Exploit ([email protected])
http://www.vupen.com/english/advisories/2010/2165 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2010/2243 ([email protected])
http://www.wireshark.org/security/wnpa-sec-2010-09.html Vendor Advisory ([email protected])
http://www.wireshark.org/security/wnpa-sec-2010-10.html Vendor Advisory ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11498 ([email protected])
http://secunia.com/advisories/41064 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.exploit-db.com/exploits/14721/ Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/2165 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/2243 (af854a3a-2127-422b-91ae-364da2661108)
http://www.wireshark.org/security/wnpa-sec-2010-09.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.wireshark.org/security/wnpa-sec-2010-10.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11498 (af854a3a-2127-422b-91ae-364da2661108)