CVE-2012-4755

Untrusted search path vulnerability in SciTools Understand before 2.6 build 600 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .udb file. NOTE: some of these details are obtained from thir...

CVE-2012-4755

CVE-2012-4755 affects SciTools Understand prior to version 2.6 build 600. The vulnerability arises from an untrusted search path: Understand looks in the current working directory for DLLs (notably wintab32.dll) when resolving dependencies, enabling local privilege escalation if a Trojan horse DL...

Scientific Toolworks Understand 'wintab32.dll' DLL Loading Arbitrary Code Execution

The version of Scientific Toolworks Understand installed on the remote Windows host is earlier than 2.6 Build 600. As such, it insecurely looks in its current working directory when resolving DLL dependencies, such as for 'wintab32.dll'. Attackers may exploit this issue by placing a specially...