Untrusted search path vulnerability in Wireshark 0.8.4 through 1.0.15 and 1.2.0 through 1.2.10 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse airpcap.dll, and possibly other DLLs, that is located in the same folder as a file that automatically launches Wireshark. Per: http://cwe.mitre.org/data/definitions/426.html
CWE-426 - 'Untrusted Search Path Vulnerability'
Publication date: Thu, 26 Aug 2010 23:36:00 +0000