CVE-2012-1666: Medium severity vmware workstation and esxi vulnerability
Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the current working directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1666?
CVE-2012-1666 has a CVSS base score that indicates it is a high-severity vulnerability.
How do I fix CVE-2012-1666?
To fix CVE-2012-1666, update VMware Workstation, Player, Fusion, View, or ESX to the latest versions as specified by VMware.
Who is affected by CVE-2012-1666?
Users of VMware Workstation versions prior to 8.0.4, VMware Player versions prior to 4.0.4, and other specified VMware products are affected by CVE-2012-1666.
What type of vulnerability is CVE-2012-1666?
CVE-2012-1666 is classified as an untrusted search path vulnerability.
Can CVE-2012-1666 be exploited remotely?
CVE-2012-1666 requires local access, so it cannot be exploited remotely.