Incorrect ACL for VMware Tools folder allows privilege escalation in VMware products

CVE-2012-1518 · HIGH Severity

AV:A/AC:L/AU:N/C:C/I:C/A:C

VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors.

Learn more about our User Device Pen Test.