CVE-2012-5379

ActivePython version 3.2.2.3 is vulnerable to an untrusted search path issue when installed in the *C:* directory. The vulnerability allows local users to escalate privileges to SYSTEM by placing a Trojan horse DLL (e.g., wlbsctrl.dll ) in directories such as C:\Python27 or C:\Python27\Scripts . ...