CVE-2012-2752: Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published Jun 1, 2012

CVE-2012-2752

Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory

–

CVSS

0.4%

EPSS

No

On KEV

Description

Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 34% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

VM

4.0; 4.1; 5.0.0.1 · source: NVD

Affected product

VM

Vma

Vmware

References

https://nvd.nist.gov/vuln/detail/CVE-2012-2752

https://www.cve.org/CVERecord?id=CVE-2012-2752

http://osvdb.org/82276

http://secunia.com/advisories/49300

http://secunia.com/advisories/49322

www.securityfocus.com

http://www.securityfocus.com/bid/53697

www.securitytracker.com

http://www.securitytracker.com/id?1027099

Vendor Advisory

http://www.vmware.com/security/advisories/VMSA-2012-0010.html

More from Vma

7.0

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain…

6.5

Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service…

5.5

net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening…

–

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial…

–

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as…