CVE-2012-1666

published 2012-09-08

CVE-2012-1666: Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View…

Priority P4 25 medium 6.9 CVSS 2.0

AV L AC M Au N C C I C A C

EXPLOIT

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the current working directory.

Affected

20 ranges

Vendor	Product	Version range	Fixed in
vmware	esx	—	—
vmware	esx	—	—
vmware	fusion	<= 4.1.1	—
vmware	fusion	—	—
vmware	fusion	—	—
vmware	fusion	—	—
vmware	fusion	—	—
vmware	player	<= 4.0.3	—
vmware	player	—	—
vmware	player	—	—
vmware	player	—	—
vmware	player	—	—
vmware	view	<= 5.0	—
vmware	view	—	—
vmware	workstation	<= 8.0.3	—
vmware	workstation	—	—
vmware	workstation	—	—
vmware	workstation	—	—
vmware	workstation	—	—
vmware	workstation	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.