← Back

CVE-2016-7085

nvd nist
Published: Dec 29, 2016Modified: May 6, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected (8)

Vmware
2 products
Workstation Player
Workstation Pro
Configuration A
8 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vmware
Workstation Player
Version 12.0.0
Workstation Player
Version 12.0.1
Workstation Player
Version 12.1.0
Workstation Player
Version 12.1.1
Vmware
Workstation Pro
Version 12.0.0
Workstation Pro
Version 12.0.1
Workstation Pro
Version 12.1.0
Workstation Pro
Version 12.1.1
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-426
Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (6)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.