Candidate: CVE-2011-3360 PublicDate: 2011-09-20 10:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3360 Description: Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory. Ubuntu-Description: Notes: Bugs: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6136 https://bugzilla.redhat.com/show_bug.cgi?id=737784 Priority: medium Discovered-by: Assigned-to: CVSS: Patches_wireshark: vendor: http://www.debian.org/security/2011/dsa-2324 upstream_wireshark: released (1.6.2) hardy_wireshark: ignored (end-of-life) lucid_wireshark: ignored (reached end-of-life) maverick_wireshark: released (1.2.11-6+squeeze4build0.10.10.1) natty_wireshark: ignored (reached end-of-life) oneiric_wireshark: not-affected (1.6.2-1) precise_wireshark: not-affected (1.6.3-1) quantal_wireshark: not-affected (1.6.3-1) raring_wireshark: not-affected (1.6.3-1) saucy_wireshark: not-affected (1.6.3-1) devel_wireshark: not-affected (1.6.3-1)