CVE-2012-4756

CVE-2012-4756 describes multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602. This flaw allows a local attacker to escalate privileges by placing a malicious DLL (mfc71loc.dll or mfc71enu.dll) in the same directory as a .lpp file, which the application then loads. The vulnerability carries a CVSS score of 6.9, indicating high severity due to complete confidentiality, integrity, and availability impacts, with a local attack vector and medium attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.