PT-2012-4428 · Flexview+1 · Flexview+2

Publicado 2012-09-08 · Atualizado 2012-09-10 · CVE-2012-3004

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealWin versions prior to 2.1.13 FlexView versions prior to 3.1.86 RealWinDemo versions prior to 2.1.13

Description The issue allows local users to gain privileges via a Trojan horse file, specifically realwin.dll or keyhook.dll, in the current working directory.

Recommendations For RealWin versions prior to 2.1.13, update to version 2.1.13 or later. For FlexView versions prior to 3.1.86, update to version 3.1.86 or later. For RealWinDemo versions prior to 2.1.13, update to version 2.1.13 or later.

Correção

Identificadores relacionados

CVE-2012-3004

Produtos afetados

Flexview

Realwin

Realwindemo

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-3004 · Nota de Segurança
• http://us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf · Nota