CVE-2012-5458: High severity vmware player vulnerability
Published Nov 14, 2012
·Updated
VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a crafted application.
Affected Software
14 affected components
VMware Player=4.0
VMware Player=4.0.0.18997
VMware Player=4.0.1
VMware Player=4.0.2
VMware Player=4.0.3
VMware Player=4.0.4
VMware Workstation=8.0
VMware Workstation=8.0.0.18997
VMware Workstation=8.0.1
VMware Workstation=8.0.1.27038
VMware Workstation=8.0.2
VMware Workstation=8.0.3
VMware Workstation=8.0.4
Microsoft Windows
Event History
Nov 14, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5458?
The severity of CVE-2012-5458 is classified as moderate, allowing unauthorized users to gain elevated privileges.
2
How do I fix CVE-2012-5458?
To fix CVE-2012-5458, upgrade VMware Workstation to version 8.0.5 or VMware Player to version 4.0.5 or later.
3
Which versions are affected by CVE-2012-5458?
CVE-2012-5458 affects VMware Workstation versions prior to 8.0.5 and VMware Player versions prior to 4.0.5.
4
What types of privileges can be escalated through CVE-2012-5458?
CVE-2012-5458 allows host OS users to gain host OS privileges via a carefully crafted application.
5
Is CVE-2012-5458 a local or remote vulnerability?
CVE-2012-5458 is considered a local vulnerability, as it requires access to the host operating system.