What’s Vulnerable › Vulnerabilities

CVE-2012-3004

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-09-08 · updated 2026-06-16

Description

Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory.

Affected products

• Realflex Flexview: through 3.1.85
• Realflex Realwin: through 2.1.12; 1.06, 2.0, 2.1
• Realflex Realwindemo: through 2.1.12

References

• http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf

Get alerted when CVE-2012-3004 or the next vulnerability affects your stack