CVE-2012-3569 Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers...
HighCVSS 9.3
EPSS 47.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ovf tool | = 2.1 | No fix listed |
| VMware Workstation | = 8.0 | No fix listed |
| VMware Workstation | = 8.0.0.18997 | No fix listed |
| VMware Workstation | = 8.0.1 | No fix listed |
| VMware Workstation | = 8.0.1.27038 | No fix listed |
| VMware Workstation | = 8.0.2 | No fix listed |
| VMware Workstation | = 8.0.3 | No fix listed |
| VMware Workstation | = 8.0.4 | No fix listed |
| VMware player | = 4.0 | No fix listed |
| VMware player | = 4.0.0.18997 | No fix listed |
| VMware player | = 4.0.1 | No fix listed |
| VMware player | = 4.0.2 | No fix listed |
| VMware player | = 4.0.3 | No fix listed |
| VMware player | = 4.0.4 | No fix listed |
References
- 87117 vdb-entry
- packetstormsecurity.com
- 51240 third-party-advisory
- technet.microsoft.com
- www.vmware.com patch vendor-advisory
- vmware-ovf-format-string(79922) vdb-entry