VMware Player and Workstation CVE-2012-5458 Local Privilege Escalation Vulnerability

Bugtraq ID:	56469
Class:	Design Error
CVE:	CVE-2012-5458
Remote:	No
Local:	Yes
Published:	Nov 09 2012 12:00AM
Updated:	Nov 09 2012 12:00AM
Credit:	Derek Soeder of Cylance
Vulnerable:	VMWare Workstation 8.0.2 VMWare Workstation 8.0.1 VMWare Workstation 7.1.5 VMWare Workstation 7.1.4 VMWare Workstation 7.1.3 VMWare Workstation 7.1.2 build 301548 VMWare Workstation 7.1.1 VMWare Workstation 7.0.1 VMWare Workstation 6.5.5 VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare Workstation 6.5 build 118166 VMWare Workstation 6.0.5 build 109488 VMWare Workstation 6.0.5 VMWare Workstation 6.0.4 build 93057 VMWare Workstation 6.0.4 VMWare Workstation 6.0.3 Build 80004 VMWare Workstation 6.0.3 VMWare Workstation 6.0.2 VMWare Workstation 6.0.1 VMWare Workstation 6.0 VMWare Workstation 5.5.9 build 126128 VMWare Workstation 5.5.8 build 108000 VMWare Workstation 5.5.8 VMWare Workstation 5.5.7 build 91707 VMWare Workstation 5.5.7 VMWare Workstation 5.5.6 Build 80404 VMWare Workstation 5.5.6 VMWare Workstation 5.5.5 VMWare Workstation 5.5.4 build 44386 VMWare Workstation 5.5.4 VMWare Workstation 5.5.3 build 42958 VMWare Workstation 5.5.3 build 34685 VMWare Workstation 5.5.1 Build 19175 VMWare Workstation 5.5.1 VMWare Workstation 5.5 VMWare Workstation 5.0 .0 build-13124 VMWare Workstation 7.13 VMWare Workstation 7.1.4 Build 385536 VMWare Workstation 7.1.2 Build 301548 VMWare Workstation 7.1.2 VMWare Workstation 7.1 VMWare Workstation 7.0.1 build 227600 VMWare Workstation 7.0 VMWare Workstation 6.5.5 build 328052 VMWare Workstation 6.5.5 VMWare Workstation 6.5.4 build 246459 VMWare Workstation 6.5.4 VMWare Workstation 6.5.3 build 185404 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.0.0.45731 VMWare Player 4.0.2 VMWare Player 4.0.1 VMWare Player 3.1.5 VMWare Player 3.1.4 VMWare Player 3.1.3 VMWare Player 3.1.2 build 301548 VMWare Player 3.1.2 VMWare Player 3.1 VMWare Player 2.5.5 Build 328052 VMWare Player 2.5.5 VMWare Player 2.5.4 VMWare Player 2.5.3 VMWare Player 2.5.2 build 156735 VMWare Player 2.5.2 VMWare Player 2.5.1 VMWare Player 2.5 build 118166 VMWare Player 2.0.5 build 109488 VMWare Player 2.0.5 VMWare Player 2.0.4 build 93057 VMWare Player 2.0.4 VMWare Player 2.0.3 Build 80004 VMWare Player 2.0.2 VMWare Player 2.0.1 VMWare Player 2.0 VMWare Player 3.1.2 Build 3 VMWare Player 3.1.2 VMWare Player 3.1.1 VMWare Player 3.1 VMWare Player 3.0.1 build 227600 VMWare Player 3.0.1 VMWare Player 3.0 VMWare Player 2.5.4 build 246459 VMWare Player 2.5.3 build 185404
Not Vulnerable:

VMware Player and Workstation CVE-2012-5458 Local Privilege Escalation Vulnerability

VMware Player and Workstation are prone to a local privilege-escalation vulnerability that occurs because of insecure process threads permissions.

A local attacker can exploit this issue to gain elevated privileges on the target host operating system.

VMware Workstation versions prior to 8.0.5 and VMware Player versions prior to 4.0.5 are vulnerable.

VMware Player and Workstation CVE-2012-5458 Local Privilege Escalation Vulnerability

An attacker requires local interactive access to exploit this issue.

VMware Player and Workstation CVE-2012-5458 Local Privilege Escalation Vulnerability

Solution:
Updates are available; please see the references for more information.

VMware Player and Workstation CVE-2012-5458 Local Privilege Escalation Vulnerability

References:

• VMware Homepage (VMware)