This host is installed with Wireshark and is prone to code execution vulnerability.

Successful exploitation will allow the attacker to execute arbitrary Lua script in the context of the affected application. Impact Level: System/Application

Upgrade to the Wireshark version 1.4.9, 1.6.2 or later, For updates refer to http://www.wireshark.org/download

The flaw is due to an unspecified error related to Lua scripts, which allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.

Wireshark versions 1.4.x before 1.4.9 and 1.6.x before 1.6.2.

• http://osvdb.org/75347
• http://www.wireshark.org/security/wnpa-sec-2011-15.html
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6136

---

Updated on 2015-03-25