critical9.3Public exploit code
CVE-2012-3569
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other produc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMware OVF Tools - Format String (Metasploit) (2)2013-02-12 · remote · windows · Verified
- VMware OVF Tools - Format String (Metasploit) (1)2013-02-06 · remote · windows · Verified
Impact
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Ovf Tool | Version 2.1 |
| Vmware | Workstation | Versions 8.0, 8.0.0.18997, 8.0.1, 8.0.1.27038, 8.0.2, 8.0.3 |
| Vmware | Player | Versions 4.0, 4.0.0.18997, 4.0.1, 4.0.2, 4.0.3, 4.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/87117
- http://packetstormsecurity.com/files/120101/VMWare-OVF-Tools-Format-String.html
- http://secunia.com/advisories/51240
- http://technet.microsoft.com/en-us/security/msvr/msvr13-002
- http://www.vmware.com/security/advisories/VMSA-2012-0015.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79922
- http://osvdb.org/87117
- http://packetstormsecurity.com/files/120101/VMWare-OVF-Tools-Format-String.html
- http://secunia.com/advisories/51240
- http://technet.microsoft.com/en-us/security/msvr/msvr13-002
- http://www.vmware.com/security/advisories/VMSA-2012-0015.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79922