CVE-2016-7086

The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2016-12-29

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Workstation Player (Vmware)
• Workstation Pro (Vmware)

References

• http://www.securityfocus.com/bid/92941
• http://www.securitytracker.com/id/1036805
• http://www.vmware.com/security/advisories/VMSA-2016-0014.html