CVE-2012-3569
high · 9.3Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
9.3
CVSS
47.7%
EPSS (exploit prob.)
99th
EPSS percentile
2012-11-14
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-134
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| vmware | ovf_tool | 2.1 |
| microsoft | windows | all versions |
| vmware | workstation | 8.0 |
| vmware | workstation | 8.0.0.18997 |
| vmware | workstation | 8.0.1 |
| vmware | workstation | 8.0.1.27038 |
| vmware | workstation | 8.0.2 |
| vmware | workstation | 8.0.3 |
| vmware | workstation | 8.0.4 |
| vmware | player | 4.0 |
| vmware | player | 4.0.0.18997 |
| vmware | player | 4.0.1 |
| vmware | player | 4.0.2 |
| vmware | player | 4.0.3 |
| vmware | player | 4.0.4 |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/87117
- http://packetstormsecurity.com/files/120101/VMWare-OVF-Tools-Format-String.html
- http://secunia.com/advisories/51240
- http://technet.microsoft.com/en-us/security/msvr/msvr13-002
- http://www.vmware.com/security/advisories/VMSA-2012-0015.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79922
- http://osvdb.org/87117
- http://packetstormsecurity.com/files/120101/VMWare-OVF-Tools-Format-String.html
- http://secunia.com/advisories/51240
- http://technet.microsoft.com/en-us/security/msvr/msvr13-002
- http://www.vmware.com/security/advisories/VMSA-2012-0015.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79922
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2012-3569