CVE-2012-4755

CVE-2012-4755 affects SciTools Understand prior to version 2.6 build 600. The vulnerability arises from an untrusted search path: Understand looks in the current working directory for DLLs (notably wintab32.dll) when resolving dependencies, enabling local privilege escalation if a Trojan horse DL...