Vulnerability in Vmware Movie_decoder

CVE-2012-4897

Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse executable file in the installer directory.

EPSS: 0.002 (36.3th percentile) — read the EPSS interpretation.

Affected products

Vmware Movie_decoder — versions 6.5.2, 6.5.3, 6.5.4
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
55802 (vdb-entry, x_refsource_BID)
vmware-movie-code-execution(79046) (vdb-entry, x_refsource_XF)
85957 (x_refsource_OSVDB, vdb-entry)
20121010 VMSA-2012-0014 VMware vCenter Operations, CapacityIQ, and Movie Decoder security updates (mailing-list, x_refsource_BUGTRAQ)