medium6.9Public exploit code
CVE-2012-1666
Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View bef…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ThinPrint - 'tpfc.dll' Insecure Library Loading Arbitrary Code Execution2012-09-04 · local · windows · Verified
Impact
Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the current working directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Workstation | through 8.0.3 Versions 8.0, 8.0.0.18997, 8.0.1, 8.0.1.27038, 8.0.2 |
| Vmware | Player | through 4.0.3 Versions 4.0, 4.0.0.18997, 4.0.1, 4.0.2 |
| Vmware | Fusion | through 4.1.1 Versions 4.0, 4.0.1, 4.0.2, 4.1 |
| Vmware | View | through 5.0 Version 4.6.0 |
| Vmware | Esx | Versions 4.1, 5.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0013.html
- https://www.vmware.com/support/vsphere4/doc/vsp_esxi41_u3_rel_notes.html#resolvedissuessecurity
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0013.html
- https://www.vmware.com/support/vsphere4/doc/vsp_esxi41_u3_rel_notes.html#resolvedissuessecurity