CVE-2016-7086
HighSummary
The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.
Risk Assessment
This vulnerability may allow local users to gain unauthorized privileges, posing a significant security risk to the system.
Recommendation
It is recommended to upgrade to version 12.5.0 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in VMware Workstation Pro 12.x, VMware Workstation Player 12.x
See all- CVE-2016-7085High
CVE-2016-7085 describes an untrusted search path vulnerability in the installer of VMware Workstation Pro 12.x before version 12.5.0 and VMware Workstation Player 12.x before version 12.5.0 on Windows. This allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2016-7083High
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.
- CVE-2016-7082High
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via an EMF file.
- CVE-2016-7081High
Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Original NVD description (English source)
The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.