Unscored severity · published Nov 14, 2012
CVE-2012-3569
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows…
–
CVSS
47.7%
EPSS
No
On KEV
Description
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
Exploitation
Is it being used?
Exploit prediction (EPSS)47.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OT
Ovf Tool · Vmware
2.1 · source: NVD
PL
Player · Vmware
4.0; 4.0.0.18997; 4.0.1; 4.0.2; 4.0.3; 4.0.4 · source: NVD
WO
Workstation · Vmware
8.0; 8.0.0.18997; 8.0.1; 8.0.1.27038; 8.0.2; 8.0.3; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3569
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3569
osvdb.org
http://osvdb.org/87117
packetstormsecurity.com
http://packetstormsecurity.com/files/120101/VMWare-OVF-Tools-Format-String.html
secunia.com
http://secunia.com/advisories/51240
technet.microsoft.com
http://technet.microsoft.com/en-us/security/msvr/msvr13-002
Patch
http://www.vmware.com/security/advisories/VMSA-2012-0015.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/79922