Unscored severity · published Nov 14, 2012
CVE-2012-5458
VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS…
–
CVSS
0.7%
EPSS
No
On KEV
Description
VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a crafted application.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PL
Player · Vmware
4.0; 4.0.0.18997; 4.0.1; 4.0.2; 4.0.3; 4.0.4 · source: NVD
WO
Workstation · Vmware
8.0; 8.0.0.18997; 8.0.1; 8.0.1.27038; 8.0.2; 8.0.3; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5458
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5458
osvdb.org
http://osvdb.org/87118
www.securityfocus.com
http://www.securityfocus.com/bid/56469
Vendor Advisory
http://www.vmware.com/security/advisories/VMSA-2012-0015.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/79924
More from Player
9.8
CVE-2016-2077
VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges…
9.8
CVE-2010-1205
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG…
6.5
CVE-2010-2249
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a…
6.3
CVE-2015-6933
The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi…
5.5
CVE-2006-3547
EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a long value of the ide1:0.fileName parameter in the .vmx…