Lucene search

K
cve[email protected]CVE-2012-5459
HistoryNov 14, 2012 - 12:30 p.m.

CVE-2012-5459

2012-11-1412:30:59
web.nvd.nist.gov
23
cve-2012-5459
vmware
workstation
player
windows
vulnerability
untrusted search path
host os privileges
nvd

6.7 Medium

AI Score

Confidence

Low

7.9 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

48.8%

Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a “system folder.”

Affected configurations

NVD
Node
vmwareplayerMatch4.0
OR
vmwareplayerMatch4.0.0.18997
OR
vmwareplayerMatch4.0.1
OR
vmwareplayerMatch4.0.2
OR
vmwareplayerMatch4.0.3
OR
vmwareplayerMatch4.0.4
OR
vmwareworkstationMatch8.0
OR
vmwareworkstationMatch8.0.0.18997
OR
vmwareworkstationMatch8.0.1
OR
vmwareworkstationMatch8.0.1.27038
OR
vmwareworkstationMatch8.0.2
OR
vmwareworkstationMatch8.0.3
OR
vmwareworkstationMatch8.0.4
AND
microsoftwindows

6.7 Medium

AI Score

Confidence

Low

7.9 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

48.8%