VYPR
Get started
← All advisories
High severity7.8NVD Advisory· Published Feb 28, 2016· Updated May 6, 2026

CVE-2016-2521

CVE-2016-2521

Description

Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges via a Trojan horse riched20.dll.dll file in the current working directory, related to use of QLibrary.

Affected products

12
  • Wireshark/Wireshark12 versions
    cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.