CVE-2012-4754

Name of the Vulnerable Software and Affected Versions MindManager 2012 version 10.0.493

Description The issue allows local users to gain privileges via a Trojan horse ssgp.dll or dwmapi.dll file in the current working directory. This can be demonstrated by a directory that contains a .mmap file.

Recommendations For MindManager 2012 version 10.0.493, consider restricting access to the ssgp.dll and dwmapi.dll files to minimize the risk of exploitation. As a temporary workaround, avoid using directories that contain .mmap files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.