CVE

Id
45717  
CVE No.
CVE-2010-3133  
Status
Candidate  
Description
Untrusted search path vulnerability in Wireshark 0.8.4 through 1.0.15 and 1.2.0 through 1.2.10 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse airpcap.dll, and possibly other DLLs, that is located in the same folder as a file that automatically launches Wireshark.  
Phase
Assigned (20100826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
497728 45717 CVE-2010-3133 EXPLOIT-DB:14721  View
497729 45717 CVE-2010-3133 URL:http://www.exploit-db.com/exploits/14721/  View
497730 45717 CVE-2010-3133 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2010-09.html  View
497731 45717 CVE-2010-3133 CONFIRM:http://www.wireshark.org/security/wnpa-sec-2010-10.html  View
497732 45717 CVE-2010-3133 OVAL:oval:org.mitre.oval:def:11498  View
497733 45717 CVE-2010-3133 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11498  View
497734 45717 CVE-2010-3133 SECUNIA:41064  View
497735 45717 CVE-2010-3133 URL:http://secunia.com/advisories/41064  View
497736 45717 CVE-2010-3133 VUPEN:ADV-2010-2165  View
497737 45717 CVE-2010-3133 URL:http://www.vupen.com/english/advisories/2010/2165  View
497738 45717 CVE-2010-3133 VUPEN:ADV-2010-2243  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39222 JVNDB-2010-005007 Nullsoft Winamp における DLL ハイジャック攻撃を実行される脆弱性 Nullsoft Winamp は、検索パスに関する処理に不備があるため、任意のコードを実行される、および DLL ハイジャック攻撃を実行される脆弱性が存在します。 CVE-2010-3137 45717 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005007.html  View