CVE-2016-7085
HighSummary
CVE-2016-7085 describes an untrusted search path vulnerability in the installer of VMware Workstation Pro 12.x before version 12.5.0 and VMware Workstation Player 12.x before version 12.5.0 on Windows. This allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Risk Assessment
Organizations may be exposed to unauthorized access to systems, potentially leading to privilege escalation and damage to IT infrastructure.
Recommendation
It is recommended to update VMware Workstation Pro and Player to version 12.5.0 or later to mitigate this vulnerability and to monitor systems for potential malicious activities.
Other vulnerabilities in VMware Workstation Pro 12.x, VMware Workstation Player 12.x
See all- CVE-2016-7086High
The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.
- CVE-2016-7083High
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.
- CVE-2016-7082High
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via an EMF file.
- CVE-2016-7081High
Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Original NVD description (English source)
Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.