CVE-2012-5378: Medium severity activestate activetcl vulnerability
Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\TD\bin directory, which is added to the PATH system environment variable, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5378?
CVE-2012-5378 is classified as a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2012-5378?
To fix CVE-2012-5378, ensure ActiveTcl is not installed in the top-level C:\ directory and avoid including C:\TD\bin in the system PATH.
Who is affected by CVE-2012-5378?
CVE-2012-5378 affects users of ActiveTcl version 8.5.12 installed in a vulnerable configuration.
What type of vulnerability is CVE-2012-5378?
CVE-2012-5378 is an untrusted search path vulnerability that allows local users to execute unauthorized DLLs.
Can CVE-2012-5378 be exploited remotely?
CVE-2012-5378 primarily requires local access to exploit, as it involves the local environment configuration.