CVE-2016-2521

HIGH

Wireshark 1.12.x < 1.12.10 and 2.0.x < 2.0.2 - Untrusted Search Path via QLibrary

Title source: llm
STIX 2.1

Description

Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges via a Trojan horse riched20.dll.dll file in the current working directory, related to use of QLibrary.

References (5)

Core 5
Core References
Vendor Advisory x_refsource_confirm
http://www.wireshark.org/security/wnpa-sec-2016-01.html
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201604-05
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1035118

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 9.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (12)
wireshark/wireshark 1.12.0
wireshark/wireshark 1.12.1
wireshark/wireshark 1.12.2
wireshark/wireshark 1.12.3
wireshark/wireshark 1.12.4
wireshark/wireshark 1.12.5
wireshark/wireshark 1.12.6
wireshark/wireshark 1.12.7
wireshark/wireshark 1.12.8
wireshark/wireshark 1.12.9
... and 2 more
Published Feb 28, 2016
Tracked Since Feb 18, 2026