CVE-2012-1518
First published: Tue Apr 17 2012(Updated: )
VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Workstation | =8.0 | |
| VMware Workstation | =8.0.1 | |
| VMware Player | =4.0 | |
| VMware Player | =4.0.1 | |
| VMware Player | =4.0.2 | |
| VMware Fusion Pro | =4.0 | |
| VMware Fusion Pro | =4.0.1 | |
| VMware Fusion Pro | =4.0.2 | |
| VMware Fusion Pro | =4.1 | |
| VMware Fusion Pro | =4.1.1 | |
| VMware ESXi | =3.5 | |
| VMware ESXi | =3.5-1 | |
| VMware ESXi | =4.0 | |
| VMware ESXi | =4.0-1 | |
| VMware ESXi | =4.0-2 | |
| VMware ESXi | =4.0-3 | |
| VMware ESXi | =4.0-4 | |
| VMware ESXi | =4.1 | |
| VMware ESXi | =4.1-1 | |
| VMware ESXi | =4.1-2 | |
| VMware ESXi | =5.0 | |
| VMware ESX | =3.5 | |
| VMware ESX | =3.5-update1 | |
| VMware ESX | =3.5-update2 | |
| VMware ESX | =3.5-update3 | |
| VMware ESX | =4.0 | |
| VMware ESX | =4.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/81163
- http://secunia.com/advisories/48782
- http://www.securityfocus.com/bid/53006
- http://www.securitytracker.com/id?1026922
- http://www.securitytracker.com/id?1026923
- http://www.vmware.com/security/advisories/VMSA-2012-0007.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16745
Frequently Asked Questions
What is the severity of CVE-2012-1518?
CVE-2012-1518 is considered a high severity vulnerability due to its potential for guest OS privilege escalation.
How do I fix CVE-2012-1518?
To fix CVE-2012-1518, upgrade to the latest versions of VMware Workstation, Player, Fusion, ESXi, or ESX as specified in the vendor's security advisories.
What versions of VMware are affected by CVE-2012-1518?
CVE-2012-1518 affects VMware Workstation versions prior to 8.0.2, Player versions prior to 4.0.2, Fusion versions prior to 4.1.2, and ESXi and ESX versions 3.5 through 5.0.
What impact does CVE-2012-1518 have on guest OS users?
CVE-2012-1518 allows guest OS users to gain elevated privileges within the guest OS, potentially compromising the system.
Is there a workaround for CVE-2012-1518?
While upgrading is the best solution for CVE-2012-1518, users may limit access to the VMware Tools folder as a temporary workaround.
- agent/author
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/description
- agent/severity
- vendor/vmware
- canonical/vmware workstation
- version/vmware workstation/8.0
- version/vmware workstation/8.0.1
- canonical/vmware player
- version/vmware player/4.0
- version/vmware player/4.0.1
- version/vmware player/4.0.2
- canonical/vmware fusion pro
- version/vmware fusion pro/4.0
- version/vmware fusion pro/4.0.1
- version/vmware fusion pro/4.0.2
- version/vmware fusion pro/4.1
- version/vmware fusion pro/4.1.1
- canonical/vmware esxi
- version/vmware esxi/3.5
- version/vmware esxi/3.5-1
- version/vmware esxi/4.0
- version/vmware esxi/4.0-1
- version/vmware esxi/4.0-2
- version/vmware esxi/4.0-3
- version/vmware esxi/4.0-4
- version/vmware esxi/4.1
- version/vmware esxi/4.1-1
- version/vmware esxi/4.1-2
- version/vmware esxi/5.0
- canonical/vmware esx
- version/vmware esx/3.5
- version/vmware esx/3.5-update1
- version/vmware esx/3.5-update2
- version/vmware esx/3.5-update3
- version/vmware esx/4.0
- version/vmware esx/4.1