CVE-2012-5377

CVE-2012-5377 describes an untrusted search path vulnerability in ActivePerl 5.16.1.1601, specifically when installed in the C:\ directory. This flaw allows a local, authenticated attacker to gain privileges by placing a malicious DLL, such as a Trojan horse wlbsctrl.dll, in the C:\Perl\Site\bin directory, which is then added to the system PATH. The vulnerability has a CVSS score of 6.0, indicating high impact on confidentiality, integrity, and availability, but requires high attack complexity and local, authenticated access. While there is no evidence of active exploitation, a Metasploit module for a related missing DLL vulnerability exists, and community discussion and media coverage are minimal.