CVEvulnerability
CVE-2012-1518
8.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-04-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors.
Affected configurations
• vmware workstation 8.0
• vmware workstation 8.0.1
• vmware player 4.0
• vmware player 4.0.1
• vmware player 4.0.2
• vmware fusion 4.0
• vmware fusion 4.0.1
• vmware fusion 4.0.2
• vmware fusion 4.1
• vmware fusion 4.1.1
• vmware esxi 3.5
• vmware esxi 4.0
• vmware esxi 4.1
• vmware esxi 5.0
• vmware esx 3.5
• vmware esx 4.0
• vmware esx 4.1
Related
Weakness · not in database (1)
References
- http://osvdb.org/81163 osvdb.org
- http://secunia.com/advisories/48782 secunia.com
- http://www.securityfocus.com/bid/53006 www.securityfocus.com
- http://www.securitytracker.com/id?1026922 www.securitytracker.com
- http://www.securitytracker.com/id?1026923 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2012-0007.html Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16745 oval.cisecurity.org
- http://osvdb.org/81163 osvdb.org
- http://secunia.com/advisories/48782 secunia.com
- http://www.securityfocus.com/bid/53006 www.securityfocus.com
- http://www.securitytracker.com/id?1026922 www.securitytracker.com
- http://www.securitytracker.com/id?1026923 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2012-0007.html Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16745 oval.cisecurity.org