VULNERABILITY INTELLIGENCE

CVE-2012-3569

CVSS score9.3 HIGH
EPSS probability47.72%
CISA KEVNot currently listed
Published2012-11-14
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references