Description (CNA)
VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / VMware Tools | affected 12.x.x, 11.x.x before 12.5.2 |
CWE
CWE-59
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- http://www.openwall.com/lists/oss-security/2025/05/12/2
- http://www.openwall.com/lists/oss-security/2025/05/13/2
- https://lists.debian.org/debian-lts-announce/2025/05/msg00017.html
- http://www.openwall.com/lists/oss-security/2025/09/24/3
- http://www.openwall.com/lists/oss-security/2025/09/25/3
- http://www.openwall.com/lists/oss-security/2025/09/25/5
- http://www.openwall.com/lists/oss-security/2025/09/26/1