CVE-2010-3133: Untrusted search path vulnerability in Wireshark 0.8.4 through 1.0.15 and 1.2.0 through 1.2.10 allows local...

Security readout for executives and security teams

Older Wireshark installations can be tricked into loading a malicious DLL placed beside a file that launches Wireshark. That can let code run in the user’s context. The issue matters mainly where outdated Wireshark is still installed, especially on analyst workstations handling untrusted capture files. Exposure is likely limited to legacy Wireshark deployments in the listed version ranges. Workstations that open captures or associated files from shared, downloaded, or removable locations are the most relevant targets. Treat as a legacy workstation hygiene issue, not an internet-wide emergency. Prioritize removal or upgrade if vulnerable Wireshark exists on security, network, or engineering systems that handle external files. Mitigation focus: Upgrade Wireshark beyond the affected version ranges using vendor guidance.; Remove obsolete Wireshark versions from analyst and engineering workstations.; Avoid opening Wireshark-associated files from untrusted directories or removable media..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.