CVE-2012-2519: Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1...

Security readout for executives and security teams

This older .NET Framework issue can let a local attacker abuse how some .NET applications load libraries. If a vulnerable application is run from an unsafe directory, it may load a malicious DLL placed there, potentially giving the attacker the application's privileges. Exposure is most plausible on Windows hosts still running the listed legacy .NET Framework versions, especially where .NET applications are launched from attacker-writable or shared working directories. Treat this as a legacy exposure and privilege-escalation cleanup item. It is not presented as internet-exploitable or actively exploited, but it matters on older Windows systems with weak local directory controls. Mitigation focus: Review Microsoft MS12-074 guidance for the applicable security update.; Inventory systems running the affected .NET Framework versions.; Prioritize legacy Windows hosts that run .NET applications from shared or writable directories..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.