The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Workstation_player | Vmware | 12.0.0 (including) | 12.0.0 (including) |
| Workstation_player | Vmware | 12.0.1 (including) | 12.0.1 (including) |
| Workstation_player | Vmware | 12.1.0 (including) | 12.1.0 (including) |
| Workstation_player | Vmware | 12.1.1 (including) | 12.1.1 (including) |
| Workstation_pro | Vmware | 12.0.0 (including) | 12.0.0 (including) |
| Workstation_pro | Vmware | 12.0.1 (including) | 12.0.1 (including) |
| Workstation_pro | Vmware | 12.1.0 (including) | 12.1.0 (including) |
| Workstation_pro | Vmware | 12.1.1 (including) | 12.1.1 (including) |