PT-2012-3428 · Vmware · Vmware View+5

Publicado 2012-09-08 · Atualizado 2012-09-10 · CVE-2012-1666

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions prior to 8.0.4 VMware Player versions prior to 4.0.4 VMware Fusion versions prior to 4.1.2 VMware View versions prior to 5.1 VMware ESX 4.1 versions prior to U3 VMware ESX 5.0 versions prior to P03

Description The issue allows local users to gain privileges via a Trojan horse tpfc.dll file in the current working directory, due to an untrusted search path vulnerability in VMware Tools.

Recommendations For VMware Workstation versions prior to 8.0.4, update to version 8.0.4 or later. For VMware Player versions prior to 4.0.4, update to version 4.0.4 or later. For VMware Fusion versions prior to 4.1.2, update to version 4.1.2 or later. For VMware View versions prior to 5.1, update to version 5.1 or later. For VMware ESX 4.1 versions prior to U3, update to U3 or later. For VMware ESX 5.0 versions prior to P03, update to P03 or later.

Exploit

Correção

Identificadores relacionados

CVE-2012-1666

Produtos afetados

Vmware Esxi

Vmware Fusion

Vmware Player

Vmware Tools

Vmware View

Vmware Workstation

Referências · 5

• 🔥 https://exploit-db.com/exploits/37780 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2012-09/0013.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1666 · Nota
• https://vmware.com/support/vsphere4/doc/vsp_esxi41_u3_rel_notes.html#resolvedissuessecurity · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1666 · Nota de Segurança