ID CVE-2012-3569
Summary Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
References
Vulnerable Configurations
  • Vmware Ovf Tool 2.1
    cpe:2.3:a:vmware:ovf_tool:2.1
  • Microsoft Windows
    cpe:2.3:o:microsoft:windows
  • VMWare Workstation 8.0
    cpe:2.3:a:vmware:workstation:8.0
  • Vmware Workstation 8.0.0.18997
    cpe:2.3:a:vmware:workstation:8.0.0.18997
  • VMWare Workstation 8.0.1
    cpe:2.3:a:vmware:workstation:8.0.1
  • Vmware Workstation 8.0.1.27038
    cpe:2.3:a:vmware:workstation:8.0.1.27038
  • VMWare Workstation 8.0.2
    cpe:2.3:a:vmware:workstation:8.0.2
  • VMWare Workstation 8.0.3
    cpe:2.3:a:vmware:workstation:8.0.3
  • VMWare Workstation 8.0.4
    cpe:2.3:a:vmware:workstation:8.0.4
  • VMware Player 4.0
    cpe:2.3:a:vmware:player:4.0
  • Vmware Player 4.0.0.18997
    cpe:2.3:a:vmware:player:4.0.0.18997
  • VMware Player 4.0.1
    cpe:2.3:a:vmware:player:4.0.1
  • VMware Player 4.0.2
    cpe:2.3:a:vmware:player:4.0.2
  • VMware Player 4.0.3
    cpe:2.3:a:vmware:player:4.0.3
  • VMware Player 4.0.4
    cpe:2.3:a:vmware:player:4.0.4
CVSS
Base: 9.3 (as of 14-11-2012 - 13:48)
Impact:
Exploitability:
CWE CWE-134
CAPEC
  • Format String Injection
    An attacker includes formatting characters in a string input field on the target application. Most applications assume that users will provide static text and may respond unpredictably to the presence of formatting character. For example, in certain functions of the C programming languages such as printf, the formatting character %s will print the contents of a memory location expecting this location to identify a string and the formatting character %n prints the number of DWORD written in the memory. An attacker can use this to read or write to memory locations or files, or simply to manipulate the value of the resulting text in unexpected ways. Reading or writing memory may result in program crashes and writing memory could result in the execution of arbitrary code if the attacker can write to the program stack.
  • String Format Overflow in syslog()
    This attack targets the format string vulnerabilities in the syslog() function. An attacker would typically inject malicious input in the format string parameter of the syslog function. This is a common problem, and many public vulnerabilities and associated exploits have been posted.
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
exploit-db via4
  • description VMWare OVF Tools Format String Vulnerability. CVE-2012-3569. Remote exploit for windows platform
    id EDB-ID:24461
    last seen 2016-02-02
    modified 2013-02-12
    published 2013-02-12
    reporter metasploit
    source https://www.exploit-db.com/download/24461/
    title VMWare OVF Tools Format String Vulnerability
  • description VMWare OVF Tools Format String Vulnerability. CVE-2012-3569. Remote exploit for windows platform
    id EDB-ID:24460
    last seen 2016-02-02
    modified 2013-02-06
    published 2013-02-06
    reporter metasploit
    source https://www.exploit-db.com/download/24460/
    title VMWare OVF Tools Format String Vulnerability
metasploit via4
nessus via4
NASL family Windows
NASL id VMWARE_OVFTOOL_VMSA_2012-0015.NASL
description The version of the VMware OVF Tool installed on the remote Windows host is potentially affected by a format string vulnerability. By tricking a user into loading a specially crafted OVF file a remote, unauthenticated attacker could execute arbitrary code on the remote host subject to the privileges of the user running the affected application.
last seen 2019-02-21
modified 2018-11-15
plugin id 63075
published 2012-11-28
reporter Tenable
source https://www.tenable.com/plugins/index.php?view=single&id=63075
title VMware OVF Tool 2.1 File Handling Format String Vulnerability (VMSA-2012-0015)
packetstorm via4
refmap via4
confirm http://www.vmware.com/security/advisories/VMSA-2012-0015.html
misc
osvdb 87117
secunia 51240
xf vmware-ovf-format-string(79922)
saint via4
bid 56468
description VMware OVF Tool Format String
id misc_vmwareplayerver
osvdb 87117
title vmware_ovf_tool_format_string
type client
vmware via4
description The OVFTool has a format string vulnerability. Exploitation of this issue may lead to code execution. In order to exploit the issuethe attacker would need to trick the user into loading their malicious OVF file.
finder
company Microsoft Inc.
name Jeremy Brown
id VMSA-2012-0015
last_updated 2012-11-08T00:00:00
published 2012-11-08T00:00:00
title VMware OVF Tool format string vulnerability.
Last major update 17-08-2013 - 02:47
Published 14-11-2012 - 07:30
Last modified 28-08-2017 - 21:31
Back to Top