CVE-2012-5459

3 documents3 sources
Severity
7.9HIGH
EPSS
0.1%
top 66.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Vmware PlayerVmware Workstation
Timeline
PublishedNov 14
Latest updateMay 17

Description

Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder."

CVSS vector

AV:A/AC:M/C:C/I:C/A:CExploitability: 5.5 | Impact: 10.0

Affected Packages2 packages

▶NVDvmware/player6 versions+5
▶NVDvmware/workstation7 versions+6

Patches

Patch: www.vmware.com ↗Patch: www.vmware.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-4g79-8pmr-hjx2: Untrusted search path vulnerability in VMware Workstation 8↗2022-05-17
▶
CVEList
CVE-2012-5459: Untrusted search path vulnerability in VMware Workstation 8↗2012-11-14
▶
CVE-2012-5459 (HIGH CVSS 7.9) | Untrusted search path vulnerability | cvebase.io