CVE-2012-3569

Published: Nov 14, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.

Affected (14)

Products: Vmware: Ovf Tool, Workstation, Player

3 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Vmware Ovf Tool	Version 2.1

Running on/with	Platform Versions
Microsoft Windows	All versions

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Vmware Workstation	Version 8.0.0.18997
Vmware Workstation	Version 8.0.1.27038
Vmware Workstation	Version 8.0.1
Vmware Workstation	Version 8.0.2
Vmware Workstation	Version 8.0.3
Vmware Workstation	Version 8.0.4
Vmware Workstation	Version 8.0

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Vmware Player	Version 4.0.0.18997
Vmware Player	Version 4.0.1
Vmware Player	Version 4.0.2
Vmware Player	Version 4.0.3
Vmware Player	Version 4.0.4
Vmware Player	Version 4.0