What’s Vulnerable › Vulnerabilities

CVE-2012-0305

• Severity: medium (CVSS 4.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-07-23 · updated 2026-06-16

Description

Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Affected products

• Symantec Backupexec System Recovery: 2010, 2011
• Symantec System Recovery: 2011

References

• http://www.securityfocus.com/bid/54594
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_01
• http://www.securityfocus.com/bid/54594
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_01

Get alerted when CVE-2012-0305 or the next vulnerability affects your stack