CVE-2012-4054

CVE-2012-4054 describes a buffer overflow vulnerability in the readfile function of CPE17 Autorun Killer 1.7.1 and earlier. This flaw allows a physically proximate attacker to execute arbitrary code by supplying a specially crafted .inf file. With a CVSS score of 6.9, this vulnerability is considered high severity due to its potential for complete compromise of confidentiality, integrity, and availability, though it requires medium attack complexity and no authentication. While not listed on CISA's KEV catalog, an exploit module for Metasploit is available on ExploitDB (EDB-18792), indicating known exploitability. Despite this, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.