CVE-2012-5378

CVE-2012-5378 is an untrusted search path vulnerability in the installation functionality of ActiveTcl 8.5.12 when installed in the top-level C:\ directory. A Trojan horse DLL placed in the installation path (C:\TD\bin), which is added to the PATH, can be loaded by the system service using the IK...

CVE-2012-5378

Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\TD\bin directory, which is added to the PATH system environment variable, as demonstrate...