CVE-2012-4756: Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain p...

Security readout for executives and security teams

This CVE describes a local privilege-gain risk in CyberLink LabelPrint 2.5.3602. The issue involves unsafe loading of specific DLL files from the current working directory. The record itself warns that provenance is unknown and details come only from third-party information, so treat the finding as exposure to verify, not a fully characterized emergency. Exposure appears limited to systems running CyberLink LabelPrint 2.5.3602. Risk is higher where users open .lpp files from shared, removable, or otherwise user-writable directories. The source bundle does not identify other affected versions, platforms, or supported patch levels. Handle as a targeted legacy-software hygiene item. It does not have confirmed active exploitation in the provided sources, but local privilege-gain paths in old desktop software can matter on shared workstations or managed fleets. Mitigation focus: Inventory and remove unsupported CyberLink LabelPrint 2.5.3602 installations where possible.; Check CyberLink or OEM guidance for any available update or replacement.; Restrict opening .lpp files from untrusted, shared, or removable locations..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.