Untrusted Search Path Vulnerabilities in CyberLink StreamAuthor 4.0 Build 3308

CVE-2012-4757 · MEDIUM Severity

AV:L/AC:M/AU:N/C:C/I:C/A:C

Multiple untrusted search path vulnerabilities in CyberLink StreamAuthor 4.0 build 3308 allow local users to gain privileges via a Trojan horse (1) mfc71loc.dll or (2) mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .sta or .stp file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Learn more about our User Device Pen Test.