CVE-2012-3524

CVE-2012-3524 describes a local privilege escalation vulnerability affecting libdbus 1.5.x and earlier, specifically when used in setuid or other privileged programs like X.org. An attacker can exploit this by manipulating the DBUS_SYSTEM_BUS_ADDRESS environment variable to execute arbitrary code. The vulnerability has a CVSS score of 6.9 (High), indicating a local attack vector with medium complexity, leading to complete confidentiality, integrity, and availability compromise. While not listed on the KEV catalog or Hot List, an exploit (EDB-21323) exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.