CVEvulnerability
CVE-2012-5458
8.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-11-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a crafted application.
Affected configurations
• vmware player 4.0
• vmware player 4.0.0.18997
• vmware player 4.0.1
• vmware player 4.0.2
• vmware player 4.0.3
• vmware player 4.0.4
• vmware workstation 8.0
• vmware workstation 8.0.0.18997
• vmware workstation 8.0.1
• vmware workstation 8.0.1.27038
• vmware workstation 8.0.2
• vmware workstation 8.0.3
• vmware workstation 8.0.4
Related
Weakness · not in database (1)
References
- http://osvdb.org/87118 osvdb.org
- http://www.securityfocus.com/bid/56469 www.securityfocus.com
- http://www.vmware.com/security/advisories/VMSA-2012-0015.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79924 exchange.xforce.ibmcloud.com
- http://osvdb.org/87118 osvdb.org
- http://www.securityfocus.com/bid/56469 www.securityfocus.com
- http://www.vmware.com/security/advisories/VMSA-2012-0015.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79924 exchange.xforce.ibmcloud.com