CVE-2016-7085 Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via....
HighCVSS 7.8
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware workstation player | = 12.0.0 | No fix listed |
| VMware workstation player | = 12.0.1 | No fix listed |
| VMware workstation player | = 12.1.0 | No fix listed |
| VMware workstation player | = 12.1.1 | No fix listed |
| VMware workstation pro | = 12.0.0 | No fix listed |
| VMware workstation pro | = 12.0.1 | No fix listed |
| VMware workstation pro | = 12.1.0 | No fix listed |
| VMware workstation pro | = 12.1.1 | No fix listed |
References
- 92940 third-party-advisory vdb-entry
- 1036805 vdb-entry
- www.vmware.com vendor-advisory