CVE-2012-5458
First published: Wed Nov 14 2012(Updated: )
VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a crafted application.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Player | =4.0 | |
| VMware Player | =4.0.0.18997 | |
| VMware Player | =4.0.1 | |
| VMware Player | =4.0.2 | |
| VMware Player | =4.0.3 | |
| VMware Player | =4.0.4 | |
| VMware Workstation | =8.0 | |
| VMware Workstation | =8.0.0.18997 | |
| VMware Workstation | =8.0.1 | |
| VMware Workstation | =8.0.1.27038 | |
| VMware Workstation | =8.0.2 | |
| VMware Workstation | =8.0.3 | |
| VMware Workstation | =8.0.4 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-5458?
The severity of CVE-2012-5458 is classified as moderate, allowing unauthorized users to gain elevated privileges.
How do I fix CVE-2012-5458?
To fix CVE-2012-5458, upgrade VMware Workstation to version 8.0.5 or VMware Player to version 4.0.5 or later.
Which versions are affected by CVE-2012-5458?
CVE-2012-5458 affects VMware Workstation versions prior to 8.0.5 and VMware Player versions prior to 4.0.5.
What types of privileges can be escalated through CVE-2012-5458?
CVE-2012-5458 allows host OS users to gain host OS privileges via a carefully crafted application.
Is CVE-2012-5458 a local or remote vulnerability?
CVE-2012-5458 is considered a local vulnerability, as it requires access to the host operating system.
- agent/references
- agent/type
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- vendor/vmware
- canonical/vmware player
- version/vmware player/4.0
- version/vmware player/4.0.0.18997
- version/vmware player/4.0.1
- version/vmware player/4.0.2
- version/vmware player/4.0.3
- version/vmware player/4.0.4
- canonical/vmware workstation
- version/vmware workstation/8.0
- version/vmware workstation/8.0.0.18997
- version/vmware workstation/8.0.1
- version/vmware workstation/8.0.1.27038
- version/vmware workstation/8.0.2
- version/vmware workstation/8.0.3
- version/vmware workstation/8.0.4
- vendor/microsoft
- canonical/microsoft windows