CVE-2012-0279: Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFIL...

Security readout for executives and security teams

Quest Toad for Data Analysts 3.0.1 created a shared Quest directory with permissions that let all local users fully control it. A lower-privileged user could place a malicious file there and potentially gain higher privileges when the software or another trusted process used it. Exposure is most likely on Windows systems where Quest Toad for Data Analysts 3.0.1 is installed and the Quest Shared directory retains Everyone: Full Control permissions. The source bundle does not establish exposure for other Quest Toad products or versions. Treat this as a legacy local privilege-escalation risk. It is not documented here as remotely exploitable or actively exploited, but affected workstations or shared systems should be remediated because weak shared-directory permissions can turn ordinary local access into higher privilege. Mitigation focus: Inventory systems running Quest Toad for Data Analysts 3.0.1.; Check Quest or trusted vendor guidance for updates or supported replacements.; Review and harden the Quest Shared directory permissions after compatibility testing..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.