CVE-2011-3360: Wireshark

High severity, CVSS 9.3. EPSS: 34.5% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.

Affected products

• Wireshark Wireshark: version 1.4.0 only; version 1.4.1 only; version 1.4.2 only; version 1.4.3 only; version 1.4.4 only; version 1.4.5 only; …

Published 2011-09-20. Last modified 2026-06-16.