Vulnerability in 3ds 3d XML Player
CVE-2012-4882
Multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) JT0DevPhase.dll file in the current working directory, as demonstrated by a directory that contains a .3dx file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
EPSS: 0.004 (34.1th percentile) — read the EPSS interpretation.
Affected products
- 3ds 3d_xml_player — versions 6.212.13.12076
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)