CVE-2012-5379

CVE-2012-5379 describes an untrusted search path vulnerability in ActivePython 3.2.2.3, specifically when installed in the C:\ directory. This flaw could allow a local attacker to gain privileges by introducing a malicious DLL into specific Python directories, which an administrator might inadvertently add to the system PATH. The vulnerability is rated as HIGH severity (CVSS 7.3), indicating a low attack complexity and local access requirement, with the potential for high impact on confidentiality, integrity, and availability. It requires user interaction (UI:R) for the malicious DLL to be loaded. Despite its severity, there is no evidence of active exploitation, and it is not listed in CISA's KEV catalog. While a Metasploit module (EDB-28130) exists, community discussion and media coverage are minimal, suggesting low public attention.