VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Sep 8, 2012· Updated Apr 29, 2026

CVE-2012-1666

CVE-2012-1666

Description

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the current working directory.

Affected products

20
  • VMware/Fusion5 versions
    cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: <=4.1.1
    • cpe:2.3:a:vmware:fusion:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:fusion:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:fusion:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:fusion:4.1:*:*:*:*:*:*:*
  • VMware/Player5 versions
    cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*range: <=4.0.3
    • cpe:2.3:a:vmware:player:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:player:4.0.0.18997:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:player:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:player:4.0.2:*:*:*:*:*:*:*
  • VMware/View2 versions
    cpe:2.3:a:vmware:view:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:view:*:*:*:*:*:*:*:*range: <=5.0
    • cpe:2.3:a:vmware:view:4.6.0:*:*:*:*:*:*:*
  • VMware/Workstation6 versions
    cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*range: <=8.0.3
    • cpe:2.3:a:vmware:workstation:8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:workstation:8.0.0.18997:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:workstation:8.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:workstation:8.0.1.27038:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:workstation:8.0.2:*:*:*:*:*:*:*
  • VMware/Esx2 versions
    cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esx:5.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.