CVE-2012-3004

Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
VendorProductVersion
realflexrealwin
𝑥
≤ 2.1.12
realflexrealwin
1.06
realflexrealwin
2.0
realflexrealwin
2.1
realflexflexview
𝑥
≤ 3.1.85
realflexrealwindemo
𝑥
≤ 2.1.12
𝑥
= Vulnerable software versions
References
http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf
http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf