CVE-2012-5378

CVE-2012-5378 is an untrusted search path vulnerability in the installation functionality of ActiveTcl 8.5.12 when installed in the top-level C:\ directory. A Trojan horse DLL placed in the installation path (C:\TD\bin), which is added to the PATH, can be loaded by the system service using the IK...