6.9

CVE-2012-1666

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the current working directory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Workstation Version <= 8.0.3
VMware ≫ Workstation Version 8.0
VMware ≫ Workstation Version 8.0.0.18997
VMware ≫ Workstation Version 8.0.1
VMware ≫ Workstation Version 8.0.1.27038
VMware ≫ Workstation Version 8.0.2
VMware ≫ Player Version <= 4.0.3
VMware ≫ Player Version 4.0
VMware ≫ Player Version 4.0.0.18997
VMware ≫ Player Version 4.0.1
VMware ≫ Player Version 4.0.2
VMware ≫ Fusion Version <= 4.1.1
VMware ≫ Fusion Version 4.0
VMware ≫ Fusion Version 4.0.1
VMware ≫ Fusion Version 4.0.2
VMware ≫ Fusion Version 4.1
VMware ≫ View Version <= 5.0
VMware ≫ View Version 4.6.0
VMware ≫ Esx Version 4.1
VMware ≫ Esx Version 5.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.78% 0.512
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2012-09/0013.html
https://www.vmware.com/support/vsphere4/doc/vsp_esxi41_u3_rel_notes.html#resolvedissuessecurity