CVE-2012-4882

CVE-2012-4882 describes multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076, allowing local privilege escalation. An attacker could place a malicious dwmapi.dll or JT0DevPhase.dll in the same directory as a .3dx file, which the player would then load. The vulnerability has a CVSS score of 6.9, indicating high severity with local access, medium attack complexity, and complete confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.