CVE-2012-5459
Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x...
CVE-2012-5459 is a high vulnerability (CVSS 7.9) in Vmware Player, published November 14, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. No source names a fixed version.
Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder."
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder."
- Record
CVE-2012-5459- CVSS 2.0
- 7.9 High
AV:A/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder."
- Record
CVE-2012-5459- Updated
- 2026-11-02
EUVDEUVD-2012-5378 No score
Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder."
- Record
EUVD-2012-5378- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4g79-8pmr-hjx2 No score
Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x...
Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder."
- Record
GHSA-4g79-8pmr-hjx2- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |