CVE-2012-3569
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x...
CVE-2012-3569 is a high vulnerability (CVSS 9.3) in Vmware Ovf Tool, published November 14, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 47.7%, the 98th percentile. No source names a fixed version.
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
- Record
CVE-2012-3569- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE List No score
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
- Record
CVE-2012-3569- Updated
- 2026-11-02
EUVDEUVD-2012-3516 No score
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
- Record
EUVD-2012-3516- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8wg2-73cr-jv3q No score
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x...
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
- Record
GHSA-8wg2-73cr-jv3q- Weakness
- CWE-134
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | VMware OVF Tools - Format String (Metasploit) (1) | 2013-02-06 |
| Exploit-DB | VMware OVF Tools - Format String (Metasploit) (2) | 2013-02-12 |
| Metasploit | VMWare OVF Tools Format String Vulnerability | 2012-11-08 |
| Metasploit | VMWare OVF Tools Format String Vulnerability | 2012-11-08 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
References
exchange.xforce.ibmcloud.com/vulnerabilities/79922
technet.microsoft.com/en-us/security/msvr/msvr13-002
packetstormsecurity.com/files/120101/VMWare-OVF-Tools-Format-String.html
vmware.com/security/advisories/VMSA-2012-0015.html
osvdb.org/87117
secunia.com/advisories/51240
nvd.nist.gov/vuln/detail/CVE-2012-3569
github.com/advisories/GHSA-8wg2-73cr-jv3q