VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 28, 2016· Updated Jun 17, 2026

CVE-2016-2521

CVE-2016-2521

Description

Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges via a Trojan horse riched20.dll.dll file in the current working directory, related to use of QLibrary.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Wireshark/Wireshark13 versions
    cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:wireshark:wireshark:1.12.0:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.4:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.5:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.6:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.7:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.8:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:1.12.9:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:wireshark:wireshark:2.0.1:*:*:*:*:*:*:*
    • (no CPE)range: >=1.12, <1.12.10 || >=2.0, <2.0.2

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.