CVE-2012-4897

2012-10-0517:55:00

mitre

web.nvd.nist.gov

cve-2012-4897

untrusted search path vulnerability

vmware movie decoder

installer

privilege escalation

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

Percentile

5.1%

JSON

Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse executable file in the installer directory.

Affected configurations

Nvd

Node

vmwaremovie_decoderRange≤7.1.2

vmwaremovie_decoderMatch6.5.2

vmwaremovie_decoderMatch6.5.3

vmwaremovie_decoderMatch6.5.4

vmwaremovie_decoderMatch6.5.5

vmwaremovie_decoderMatch7.0

VendorProductVersionCPE
vmwaremovie_decoder*cpe:2.3:a:vmware:movie_decoder:*:*:*:*:*:*:*:*
vmwaremovie_decoder6.5.2cpe:2.3:a:vmware:movie_decoder:6.5.2:*:*:*:*:*:*:*
vmwaremovie_decoder6.5.3cpe:2.3:a:vmware:movie_decoder:6.5.3:*:*:*:*:*:*:*
vmwaremovie_decoder6.5.4cpe:2.3:a:vmware:movie_decoder:6.5.4:*:*:*:*:*:*:*
vmwaremovie_decoder6.5.5cpe:2.3:a:vmware:movie_decoder:6.5.5:*:*:*:*:*:*:*
vmwaremovie_decoder7.0cpe:2.3:a:vmware:movie_decoder:7.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	movie_decoder	*	cpe:2.3:a:vmware:movie_decoder::::::::
vmware	movie_decoder	6.5.2	cpe:2.3:a:vmware:movie_decoder:6.5.2:::::::*
vmware	movie_decoder	6.5.3	cpe:2.3:a:vmware:movie_decoder:6.5.3:::::::*
vmware	movie_decoder	6.5.4	cpe:2.3:a:vmware:movie_decoder:6.5.4:::::::*
vmware	movie_decoder	6.5.5	cpe:2.3:a:vmware:movie_decoder:6.5.5:::::::*
vmware	movie_decoder	7.0	cpe:2.3:a:vmware:movie_decoder:7.0:::::::*