CVE:CVE-2010-3133
CNNVD:CNNVD-201008-314
Wireshark 0.8.4至1.0.15版本和1.2.0至1.2.10版本中存在不可信搜索路径漏洞。本地用户以及远程攻击者可以借助与能够自动启动Wireshark的文件位于相同文件夹中的airpcap.dll木马以及其他DLL执行任意代码和DLL劫持攻击。
solution:Upgrade wireshark wireshark to a higher version than 1.2.10,0.99.2,0.99.3,0.99.4,0.99.5,0.99.6,0.99.7,0.99.8,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,and avoid the version (,1.2.10],0.99.2,0.99.3,0.99.4,0.99.5,0.99.6,0.99.7,0.99.8,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9