Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Realwin | Realflex | * | 2.1.12 (including) |
| Realwin | Realflex | 1.06 (including) | 1.06 (including) |
| Realwin | Realflex | 2.0 (including) | 2.0 (including) |
| Realwin | Realflex | 2.1 (including) | 2.1 (including) |