Read the docs
TI-2012-04552 Aliases CVE-2012-5379GHSA-v592-hhw6-w7x7

Untrusted search path vulnerability in the installation functionality in ActivePython…

Priority LOW 37Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Python27 or C:\Python27\Scripts directory, which may be added to the PATH system environment variable by an administrator, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview. NOTE: CVE disputes this issue because the unsafe PATH is established only by a separate administrative action that is not a default part of the ActivePython installation

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01227 69th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:activestate:activepython:3.2.2.3:*:*:*:*:*:*:*3.2.2.3VulnerableActivestate
  • cpe:2.3:a:activestate:activepython:3.2.2.3:*:*:*:*:*:*:* Versions 3.2.2.3 Vulnerable ·Activestate

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-5379
  2. 2026-10-03 Alias added: GHSA-v592-hhw6-w7x7

References

Exploit 1

  • TI-2002-00127 ActivePython ActiveX control for Python in the AXScript package, when used in Internet… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences