CVE-2012-4757: Multiple untrusted search path vulnerabilities in CyberLink StreamAuthor 4.0 build 3308 allow local users t...

Security readout for executives and security teams

CVE-2012-4757 describes a local privilege escalation risk in CyberLink StreamAuthor 4.0 build 3308. A local attacker may influence where the application loads certain DLL files from. The record is old, has unknown severity, and explicitly warns that the provenance is unknown and based only on third-party information. Exposure appears limited to systems with CyberLink StreamAuthor 4.0 build 3308 installed, especially where users open associated project files from untrusted or shared directories. The structured affected-product fields are not populated, so inventory confirmation is necessary. Treat this as a targeted legacy-software exposure check, not an emergency. Prioritize confirmation and removal or isolation if the product is still installed, because the record lacks severity, exploitation, and vendor-remediation evidence. Mitigation focus: Identify whether CyberLink StreamAuthor 4.0 build 3308 exists in the environment.; Check CyberLink or trusted vendor guidance for updates or retirement advice.; Remove unsupported or unnecessary installations from managed endpoints..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.