CVE-2012-3004

Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory.

Score

CVSS 2.0 6.9 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2012-09-08

Last modified

2024-09-17

Affected products

• Flexview (Realflex)
• Realwin (Realflex)
• Realwindemo (Realflex)

References

• http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf