CVE-2012-5378
NONE EPSS 55.5%
Published Oct 11, 201213y ago · Modified Jun 16, 20262w ago
Published Oct 11, 2012 13y ago
Last Modified Jun 16, 2026 2w ago
Description
Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\TD\bin directory, which is added to the PATH system environment variable, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview.
Threat Intelligence
EPSS Exploit Probability
55.5% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| activestate | activetcl | 8.5.12 | any |
References 2
- osvdb.org http://osvdb.org/86179
- htbridge.com https://www.htbridge.com/advisory/HTB23108
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.