CVE-2012-3569: vmware ovf_tool
Vulnerability summary
CVE-2012-3569 is a high (CVSS 9.3) vulnerability in vmware ovf_tool. EPSS estimates a 47.72% chance of exploitation in the next 30 days, higher than 98.8% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 14-11-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
47.72%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 47.72% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundVMware OVF Tools - Format String (Metasploit) (1)
Maturity: weaponized
VMware OVF Tools - Format String (Metasploit) (2)
Maturity: weaponized
VMWare OVF Tools Format String Vulnerability
exploit/windows/browser/ovftool_format_string
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Vmware3 products
- ovf_tool2.1
- player4.0 | 4.0.0.18997 | 4.0.1 | 4.0.2 | 4.0.3 | 4.0.4
- workstation8.0 | 8.0.0.18997 | 8.0.1 | 8.0.1.27038 | 8.0.2 | 8.0.3 | 8.0.4
1 vendor · 3 products
References
6 links
technet.microsoft.com/en-us/security/msvr/msvr13-002X Refsource MISC