« Volver al listado

CVE-2012-3004

Estado: ModificadaMedia (6.9)—

Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Realflex — FlexviewRealflex — RealwinRealflex — Realwindemo

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-3004",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-09-08T10:28:20.510",
  "references": [
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de ruta de búsqueda no confiable en RealFlex RealWin antes de v2.1.13, FlexView antes de v3.1.86, y RealWinDemo antes de v2.1.13, permite a usuarios locales obtener privilegios a través de un troyano (1) realwin.dll o (2) KeyHook.dll en el directorio de trabajo actual."
    }
  ],
  "lastModified": "2026-06-16T23:42:29.950",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:realflex:realwin:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "623061FC-5D07-4B73-84D2-7BBAF539F046",
              "versionEndIncluding": "2.1.12"
            },
            {
              "criteria": "cpe:2.3:a:realflex:realwin:1.06:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C400FAA-C8A3-4549-9954-91F19C7BE50F"
            },
            {
              "criteria": "cpe:2.3:a:realflex:realwin:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE107083-8D98-419D-9EEC-8E8067E12201"
            },
            {
              "criteria": "cpe:2.3:a:realflex:realwin:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D51FC22-F25C-4F47-9B38-F9E6CF57E361"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:realflex:flexview:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "695A3D6C-9E33-4FBB-84BD-9B24101C264B",
              "versionEndIncluding": "3.1.85"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:realflex:realwindemo:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69276A4F-33C4-4A95-980D-939577FE0CCD",
              "versionEndIncluding": "2.1.12"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/426.html\r\n\r\n'CWE-426 Untrusted Search Path'",
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}