CVE-2012-3004

Published: Sep 8, 2012Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory.

Affected (6)

Products: Realflex: Realwin, Flexview, Realwindemo

3 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Realflex Realwin	Up to 2.1.12
Realflex Realwin	Version 1.06
Realflex Realwin	Version 2.0
Realflex Realwin	Version 2.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Realflex Flexview	Up to 3.1.85

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Realflex Realwindemo	Up to 2.1.12

References (2)

http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf

Source: ics-cert@hq.dhs.gov

US Government Resource

http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.