CVE-2012-1666

Published Sep 8, 2012

Last updated 12 years ago

Overview

Description: Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the current working directory.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.9
Impact score: 10
Exploitability score: 3.4
Vector string: AV:L/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Evaluator

Comment: Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426 Untrusted Search Path'
Impact: -
Solution: -

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C31BB23E-4BAF-4C07-B613-98E590695A7B",
            "versionEndIncluding": "8.0.3"
          },
          {
            "criteria": "cpe:2.3:a:vmware:workstation:8.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FCE22BB0-F375-4883-BF6C-5A6369694EF3"
          },
          {
            "criteria": "cpe:2.3:a:vmware:workstation:8.0.0.18997:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "01483038-BC89-44BA-B07B-362FC5D7E8C1"
          },
          {
            "criteria": "cpe:2.3:a:vmware:workstation:8.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD913295-9302-425A-A9E1-B0DF76AD3069"
          },
          {
            "criteria": "cpe:2.3:a:vmware:workstation:8.0.1.27038:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B671AC17-7064-4541-ADB3-FCD72109C766"
          },
          {
            "criteria": "cpe:2.3:a:vmware:workstation:8.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "51B6CAE2-A396-40C8-8FF0-D9EC64D5C9A0"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "18A0EAA7-72FF-4910-931B-D18C7407CF1E",
            "versionEndIncluding": "4.0.3"
          },
          {
            "criteria": "cpe:2.3:a:vmware:player:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "535E3D3C-76A5-405A-8F9D-21A86ED31D07"
          },
          {
            "criteria": "cpe:2.3:a:vmware:player:4.0.0.18997:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "81AFBBE6-0B3B-44DB-BBEB-08C8B2C39038"
          },
          {
            "criteria": "cpe:2.3:a:vmware:player:4.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7D09D7FB-78EE-4168-996D-FD3CF2E187BD"
          },
          {
            "criteria": "cpe:2.3:a:vmware:player:4.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "816F1646-A1C9-4E4A-BCE1-A34D00B51ABE"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4B8519FA-C221-4D6F-B418-D2FED3B9D634",
            "versionEndIncluding": "4.1.1"
          },
          {
            "criteria": "cpe:2.3:a:vmware:fusion:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "60234129-7F7F-49FA-A425-CDAB4D09AB23"
          },
          {
            "criteria": "cpe:2.3:a:vmware:fusion:4.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4FB73EC4-F3CE-428B-BA40-47FB21181543"
          },
          {
            "criteria": "cpe:2.3:a:vmware:fusion:4.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "927863C2-5A61-4137-83AC-6CF3F2958941"
          },
          {
            "criteria": "cpe:2.3:a:vmware:fusion:4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F74559CB-6E52-421F-88F3-739913C26C8E"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:vmware:view:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B2D11ED8-646B-4F8E-A0E5-56C6964F9D61",
            "versionEndIncluding": "5.0"
          },
          {
            "criteria": "cpe:2.3:a:vmware:view:4.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4346ED63-851E-43E9-933D-7CCAFA43B17B"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0B6BA46F-4E8C-4B2A-AE92-81B9F1B4D56C"
          },
          {
            "criteria": "cpe:2.3:o:vmware:esx:5.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E52EEFA3-BE68-4AFF-A22C-036D33306AF0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Evaluator

Configurations

References