Lucene search

K
vmwareVMwareVMSA-2012-0015
HistoryNov 08, 2012 - 12:00 a.m.

VMware Hosted Products and OVF Tool address security issues

2012-11-0800:00:00
www.vmware.com
49

EPSS

0.965

Percentile

99.6%

a. VMware Workstation and Player Weak permissions on process threads vulnerability.Certain processes when created have weak security permissions assigned. It is possible to commandeer these process threads, which could result in Elevation of Privilege in the context of the host. VMware would like to thank Derek Soeder of Cylance, Inc. for reporting this issue to us. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-5458 to this issue. Column 4 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available.