VMware OVF Tool 2.1 File Handling Format String Vulnerability (VMSA-2012-0015)

high Nessus Plugin ID 63075

Language:

Synopsis

The remote Windows host has a tool installed that is affected by a format string vulnerability.

Description

The version of the VMware OVF Tool installed on the remote Windows host is potentially affected by a format string vulnerability. By tricking a user into loading a specially crafted OVF file a remote, unauthenticated attacker could execute arbitrary code on the remote host subject to the privileges of the user running the affected application.

Solution

Upgrade to VMware OVF Tool 3.0.1 or later.

Plugin Details

Severity: High

ID: 63075

File Name: vmware_ovftool_vmsa_2012-0015.nasl

Version: 1.11

Type: local

Agent: windows

Family: Windows

Published: 11/28/2012

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 8.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:vmware:ovf_tool

Required KB Items: SMB/VMware OVF Tool/Path, SMB/VMware OVF Tool/Version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/8/2012

Vulnerability Publication Date: 11/8/2012

Exploitable With

Core Impact

Metasploit (VMWare OVF Tools Format String Vulnerability)

Reference Information

CVE: CVE-2012-3569

BID: 56468

VMSA: 2012-0015

Detections

Analytics