Vulnerability Details : CVE-2012-5458
VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a crafted application.
Exploit prediction scoring system (EPSS) score for CVE-2012-5458
Probability of exploitation activity in the next 30 days: 0.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 23 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2012-5458
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
8.3
|
HIGH | AV:A/AC:L/Au:N/C:C/I:C/A:C |
6.5
|
10.0
|
NIST |
CWE ids for CVE-2012-5458
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-5458
-
http://www.securityfocus.com/bid/56469
VMware Player and Workstation CVE-2012-5458 Local Privilege Escalation Vulnerability
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/79924
VMware Workstation and Player privilege escalation CVE-2012-5458 Vulnerability Report
-
http://www.vmware.com/security/advisories/VMSA-2012-0015.html
VMSA-2012-0015Vendor Advisory
Products affected by CVE-2012-5458
- cpe:2.3:a:vmware:workstation:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:8.0.0.18997:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:8.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:8.0.1.27038:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:8.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:8.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:4.0.0.18997:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:player:4.0.4:*:*:*:*:*:*:*