Vulnerability Details : CVE-2012-1518
VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors.
Products affected by CVE-2012-1518
- cpe:2.3:a:vmware:workstation:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:3.5:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:3.5:1:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:4.0:1:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:4.0:2:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:4.0:3:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:4.0:4:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:4.1:1:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:4.1:2:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:3.5:update1:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:3.5:update2:*:*:*:*:*:*
- cpe:2.3:o:vmware:esx:3.5:update3:*:*:*:*:*:*
Threat overview for CVE-2012-1518
Top countries where our scanners detected CVE-2012-1518
Top open port discovered on systems with this issue
443
IPs affected by CVE-2012-1518 36
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2012-1518!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2012-1518
0.27%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 63 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-1518
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
8.3
|
HIGH | AV:A/AC:L/Au:N/C:C/I:C/A:C |
6.5
|
10.0
|
NIST |
CWE ids for CVE-2012-1518
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-1518
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16745
Repository / Oval Repository
-
http://www.securityfocus.com/bid/53006
VMware Multiple Products Local Privilege Escalation Vulnerability
-
http://secunia.com/advisories/48782
Sign in
-
http://www.securitytracker.com/id?1026922
VMware Workstation/Player/Fusion VMware Tools Access Control Error Lets Local Users Gain Elevated Privileges - SecurityTracker
-
http://osvdb.org/81163
-
http://www.securitytracker.com/id?1026923
VMware ESX/ESXi VMware Tools Access Control Error Lets Local Users Gain Elevated Privileges - SecurityTracker
-
http://www.vmware.com/security/advisories/VMSA-2012-0007.html
VMSA-2012-0007.1Vendor Advisory
Jump to