CVEvulnerability
CVE-2012-3004
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory.
Affected configurations
• realflex realwin (<= 2.1.12)
• realflex realwin 1.06
• realflex realwin 2.0
• realflex realwin 2.1
• realflex flexview (<= 3.1.85)
• realflex realwindemo (<= 2.1.12)
References
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf US Government Resource
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf US Government Resource