CVE-2012-3004

Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse 1 realwin.dll or 2 keyhook.dll file in the current working directory...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse 1 realwin.dll or 2 keyhook.dll file in the current working directory...

CVE-2012-3004

The CVE-2012-3004 issue is a DLL hijack vulnerability (CWE-427) in RealFlex RealWinDemo (and related components RealWin, FlexView). An attacker who can place a malicious realwin.dll or keyhook.dll in the current working directory could trigger arbitrary code execution with local privileges. Affec...

CVE-2012-3004: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse 1 realwin.dll or 2 keyhook.dll file in the current working directory...

PT-2012-4428

Name of the Vulnerable Software and Affected Versions RealWin versions prior to 2.1.13 FlexView versions prior to 3.1.86 RealWinDemo versions prior to 2.1.13 Description The issue allows local users to gain privileges via a Trojan horse file, specifically realwin.dll or keyhook.dll, in the curren...

DATAC RealWin 2.0 SCADA Software - Remote PreaAuth Exploit

Hi --------------------------------- http://www.dataconline.com/software/realwin.php "RealWin is a SCADA server product which includes a FlexView HMI and runs on current Microsoft Windows platforms 2000 and XP. It can operate on a single PC or multiple PCs connected through a TCP/IP network. It...