PT-2012-4428 · Flexview+1 · Flexview+2

Published 2012-09-08 · Updated 2012-09-10 · CVE-2012-3004

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RealWin versions prior to 2.1.13 FlexView versions prior to 3.1.86 RealWinDemo versions prior to 2.1.13

Description The issue allows local users to gain privileges via a Trojan horse file, specifically realwin.dll or keyhook.dll, in the current working directory.

Recommendations For RealWin versions prior to 2.1.13, update to version 2.1.13 or later. For FlexView versions prior to 3.1.86, update to version 3.1.86 or later. For RealWinDemo versions prior to 2.1.13, update to version 2.1.13 or later.

Fix

Related Identifiers

CVE-2012-3004

Affected Products

Flexview

Realwin

Realwindemo

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-3004 · Security Note
• http://us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf · Note