Wireshark Lua Script File Arbitrary Code Execution Vulnerability
BID:49528
Info
Wireshark Lua Script File Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 49528 |
| Class: | Design Error |
| CVE: |
CVE-2011-3360 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 08 2011 12:00AM |
| Updated: | Nov 21 2011 06:45AM |
| Credit: | Wireshark |
| Vulnerable: |
Wireshark Wireshark 1.6.1 Wireshark Wireshark 1.6 Wireshark Wireshark 1.4.8 Wireshark Wireshark 1.4.7 Wireshark Wireshark 1.4.6 Wireshark Wireshark 1.4.5 Wireshark Wireshark 1.4.4 Wireshark Wireshark 1.4.3 Wireshark Wireshark 1.4.2 Wireshark Wireshark 1.4.1 Wireshark Wireshark 1.4.0 Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
Wireshark Wireshark 1.6.2 Wireshark Wireshark 1.4.9 |
Discussion
Wireshark Lua Script File Arbitrary Code Execution Vulnerability
Wireshark is prone to a vulnerability that lets attackers execute arbitrary code.
A successful exploit can allow the attacker to execute arbitrary Lua script in the context of the affected application.
Wireshark 1.6.0 to 1.6.1 and 1.4.0 to 1.4.8 are vulnerable.
Wireshark is prone to a vulnerability that lets attackers execute arbitrary code.
A successful exploit can allow the attacker to execute arbitrary Lua script in the context of the affected application.
Wireshark 1.6.0 to 1.6.1 and 1.4.0 to 1.4.8 are vulnerable.
Exploit / POC
Wireshark Lua Script File Arbitrary Code Execution Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Wireshark Lua Script File Arbitrary Code Execution Vulnerability
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2011 x86_64
Mandriva Linux Mandrake 2011
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2011 x86_64
-
Mandriva dumpcap-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64wireshark-devel-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64wireshark1-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva rawshark-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva tshark-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva wireshark-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva wireshark-tools-1.6.2-0.1-mdv2011.0.x86_64.rpm
http://www.mandriva.com/en/downloads/
Mandriva Linux Mandrake 2011
-
Mandriva dumpcap-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libwireshark-devel-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libwireshark1-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva rawshark-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva tshark-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva wireshark-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva wireshark-tools-1.6.2-0.1-mdv2011.0.i586.rpm
http://www.mandriva.com/en/downloads/
References
Wireshark Lua Script File Arbitrary Code Execution Vulnerability
References:
References:
- Wireshark Homepage (Wireshark)
- Wireshark Lua script execution vulnerability (Wireshark)