Wireshark Lua Script File Arbitrary Code Execution Vulnerability (Windows)

  1. Network Vulnerabilities
  2. General
  3. Wireshark Lua Script File Arbitrary Code Execution Vulnerability (Windows)
Summary
This host is installed with Wireshark and is prone to code execution vulnerability.
Impact
Successful exploitation will allow the attacker to execute arbitrary Lua script in the context of the affected application. Impact Level: System/Application
Solution
Upgrade to the Wireshark version 1.4.9, 1.6.2 or later, For updates refer to http://www.wireshark.org/download
Insight
The flaw is due to an unspecified error related to Lua scripts, which allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
Affected
Wireshark versions 1.4.x before 1.4.9 and 1.6.x before 1.6.2.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities