CVE-2012-5459 Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "sy...
HighCVSS 7.9
EPSS 0.61%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware player | = 4.0 | No fix listed |
| VMware player | = 4.0.0.18997 | No fix listed |
| VMware player | = 4.0.1 | No fix listed |
| VMware player | = 4.0.2 | No fix listed |
| VMware player | = 4.0.3 | No fix listed |
| VMware player | = 4.0.4 | No fix listed |
| VMware Workstation | = 8.0 | No fix listed |
| VMware Workstation | = 8.0.0.18997 | No fix listed |
| VMware Workstation | = 8.0.1 | No fix listed |
| VMware Workstation | = 8.0.1.27038 | No fix listed |
| VMware Workstation | = 8.0.2 | No fix listed |
| VMware Workstation | = 8.0.3 | No fix listed |
| VMware Workstation | = 8.0.4 | No fix listed |
References
- 87119 vdb-entry
- 56470 vdb-entry
- www.vmware.com patch vendor-advisory
- workstation-dll-code-exec(79923) vdb-entry