CVE-2012-1666

medium VMware
CVSS v3 Base Score
6.9
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS Score
0.2%
Exploitation probability in 30 days
Top 59% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C
Published: September 8, 2012 (4996 days ago)
Last Modified: April 29, 2026
Vendor: VMware
Source: NVD

Description

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the current working directory.

CWE

NVD-CWE-Other

Affected Products

vmware workstationvmware playervmware fusionvmware viewvmware esx

References

🔗 archives.neohapsis.com 🔗 www.vmware.com 🔗 archives.neohapsis.com 🔗 www.vmware.com