CVE Vulnerabilities

CVE-2012-5458

Published: Nov 14, 2012 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
8.3 HIGH
AV:A/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a crafted application.

Affected Software

Name Vendor Start Version End Version
Player Vmware 4.0 (including) 4.0 (including)
Player Vmware 4.0.0.18997 (including) 4.0.0.18997 (including)
Player Vmware 4.0.1 (including) 4.0.1 (including)
Player Vmware 4.0.2 (including) 4.0.2 (including)
Player Vmware 4.0.3 (including) 4.0.3 (including)
Player Vmware 4.0.4 (including) 4.0.4 (including)
Workstation Vmware 8.0 (including) 8.0 (including)
Workstation Vmware 8.0.0.18997 (including) 8.0.0.18997 (including)
Workstation Vmware 8.0.1 (including) 8.0.1 (including)
Workstation Vmware 8.0.1.27038 (including) 8.0.1.27038 (including)
Workstation Vmware 8.0.2 (including) 8.0.2 (including)
Workstation Vmware 8.0.3 (including) 8.0.3 (including)
Workstation Vmware 8.0.4 (including) 8.0.4 (including)

References