What is the CVSS score of CVE-2012-5459?

CVE-2012-5459 has a CVSS 2.0 base score of 7.9 (High). CVSS vector: AV:A/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2012-5459?

Yes, a patch is available for CVE-2012-5459. Update the affected software to the latest version immediately.

Player CVE-2012-5459

HIGH

2012-11-14 cve@mitre.org

VMware Information Disclosure Microsoft Player Workstation

7.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.9 HIGH

AV:A/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Adjacent

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Nov 14, 2012 - 12:30 cve.org

HIGH 7.9

DescriptionCVE.org

AnalysisAI

Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a. Rated high severity (CVSS 7.9).

Technical ContextAI

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Player

View all

CVE-2012-3569 CRITICAL Act Now POC

9.3 Nov 14

Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Pl

CVE-2013-1662 MEDIUM This Month POC

6.9 Aug 24

vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allo

CVE-2014-10024 HIGH This Week POC

7.5 Jan 13

Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plu

CVE-2012-1666 MEDIUM This Month POC

6.9 Sep 08

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMwa

CVE-2016-2077 CRITICAL Act Now

9.8 May 18

VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable fil

CVE-2012-3288 CRITICAL Act Now

9.3 Jun 14

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fu

CVE-2012-2449 CRITICAL Act Now

9.0 May 04

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 th

CVE-2012-2450 CRITICAL Act Now

9.0 May 04

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 thr

CVE-2012-1518 HIGH This Week

8.3 Apr 17

VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 thr

CVE-2012-5458 HIGH This Week

8.3 Nov 14

VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified p

CVE-2015-2341 HIGH This Week

7.8 Jun 13

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before

CVE-2013-3519 HIGH This Week

7.9 Dec 04

lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMw

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2012-5459 vulnerability details – vuln.today

Back