CVE-2012-4866

CVE-2012-4866 describes an untrusted search path vulnerability in Xtreme RAT 3.5, allowing local users to execute arbitrary code. This flaw enables DLL hijacking attacks by tricking the application into loading a malicious dwmapi.dll from the current working directory. With a CVSS score of 6.9, it carries a high impact on confidentiality, integrity, and availability, requiring local access and medium attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.