CVE-2012-1518 VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Too...
HighCVSS 8.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Workstation | = 8.0 | No fix listed |
| VMware Workstation | = 8.0.1 | No fix listed |
| VMware player | = 4.0 | No fix listed |
| VMware player | = 4.0.1 | No fix listed |
| VMware player | = 4.0.2 | No fix listed |
| VMware Fusion | = 4.0 | No fix listed |
| VMware Fusion | = 4.0.1 | No fix listed |
| VMware Fusion | = 4.0.2 | No fix listed |
| VMware Fusion | = 4.1 | No fix listed |
| VMware Fusion | = 4.1.1 | No fix listed |
| VMware esxi | = 3.5 | No fix listed |
| VMware esxi | = 3.5-1 | No fix listed |
| VMware esxi | = 4.0 | No fix listed |
| VMware esxi | = 4.0-1 | No fix listed |
| VMware esxi | = 4.0-2 | No fix listed |
| VMware esxi | = 4.0-3 | No fix listed |
| VMware esxi | = 4.0-4 | No fix listed |
| VMware esxi | = 4.1 | No fix listed |
| VMware esxi | = 4.1-1 | No fix listed |
| VMware esxi | = 4.1-2 | No fix listed |
| VMware esxi | = 5.0 | No fix listed |
| VMware ESX | = 3.5 | No fix listed |
| VMware ESX | = 3.5-update1 | No fix listed |
| VMware ESX | = 3.5-update2 | No fix listed |
| VMware ESX | = 3.5-update3 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ESX | = 4.0 | No fix listed |
| VMware ESX | = 4.1 | No fix listed |
References
- 81163 vdb-entry
- 48782 third-party-advisory
- 53006 vdb-entry
- 1026922 vdb-entry
- 1026923 vdb-entry
- www.vmware.com vendor-advisory
- oval:org.mitre.oval:def:16745 signature vdb-entry