CVE-2012-2752 - Vulnerability Details - OpenCVE

Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.00041.

Key SSVC decision points have not yet been added.

Vendors	Products
Vmware Subscribe	Vma Subscribe

Configuration 1 [-]

OR	cpe:2.3:a:vmware:vma:4.0:::::::*
	cpe:2.3:a:vmware:vma:4.1:::::::*
	cpe:2.3:a:vmware:vma:5.0.0.1:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2012-2732	Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://osvdb.org/82276
http://secunia.com/advisories/49300
http://secunia.com/advisories/49322
http://www.securityfocus.com/bid/53697
http://www.securitytracker.com/id?1027099
http://www.vmware.com/security/advisories/VMSA-2012-0010.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/75891

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2012-06-01T20:00:00

Updated: 2024-08-06T19:42:32.460Z

Reserved: 2012-05-14T00:00:00

Link: CVE-2012-2752

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2012-06-01T20:55:06.950

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-2752

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

NVD-CWE-Other

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2012-05-25T00:00:00", "descriptions": [{"lang": "en", "value": "Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1027099", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1027099"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.vmware.com/security/advisories/VMSA-2012-0010.html"}, {"name": "49300", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/49300"}, {"name": "53697", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/53697"}, {"name": "82276", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/82276"}, {"name": "49322", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/49322"}, {"name": "vmware-vma-unspec-priv-esc(75891)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75891"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2012-2752", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1027099", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1027099"}, {"name": "http://www.vmware.com/security/advisories/VMSA-2012-0010.html", "refsource": "CONFIRM", "url": "http://www.vmware.com/security/advisories/VMSA-2012-0010.html"}, {"name": "49300", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/49300"}, {"name": "53697", "refsource": "BID", "url": "http://www.securityfocus.com/bid/53697"}, {"name": "82276", "refsource": "OSVDB", "url": "http://osvdb.org/82276"}, {"name": "49322", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/49322"}, {"name": "vmware-vma-unspec-priv-esc(75891)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75891"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T19:42:32.460Z"}, "title": "CVE Program Container", "references": [{"name": "1027099", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1027099"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.vmware.com/security/advisories/VMSA-2012-0010.html"}, {"name": "49300", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/49300"}, {"name": "53697", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/53697"}, {"name": "82276", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/82276"}, {"name": "49322", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/49322"}, {"name": "vmware-vma-unspec-priv-esc(75891)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75891"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2012-2752", "datePublished": "2012-06-01T20:00:00", "dateReserved": "2012-05-14T00:00:00", "dateUpdated": "2024-08-06T19:42:32.460Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vmware:vma:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "7426B5AC-D0FD-424D-9A1E-0875C2102D0D", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vma:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "0C1050A1-D990-4769-BBD2-6125867129D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vma:5.0.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "238DA4A0-629D-4848-A0F1-4A324EBCAE1C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory."}, {"lang": "es", "value": "Vulnerabilidad de ruta de b\u00fasqueda no confiable en VMware vMA v4.x y v5.x antes de v5.0.0.2, permite a usuarios locales conseguir privilegios a trav\u00e9s de un caballo de Troya DLL en el directorio de trabajo actual."}], "evaluatorComment": "Per: http://cwe.mitre.org/data/lists/426.html 'Untrusted Search Path'", "id": "CVE-2012-2752", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-06-01T20:55:06.950", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/82276"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/49300"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/49322"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/53697"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1027099"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vmware.com/security/advisories/VMSA-2012-0010.html"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75891"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/82276"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/49300"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/49322"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/53697"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1027099"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vmware.com/security/advisories/VMSA-2012-0010.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75891"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}