CVE:CVE-2012-1666
CNNVD:CNNVD-201209-147
VMWare Workstation是美国威睿（VMware）公司的一套桌面虚拟计算机软件。该软件提供可以同时运行多个不同的操作系统的虚拟机功能。
VMware Workstation 8.0.4之前版本、VMware Player 4.0.4之前版本、VMware Fusion 4.1.2之前版本、VMware View 5.1之前版本、VMware ESX 4.1 U3之前版本、5.0 P03之前版本中的VMware Tools中存在不可信搜索路径漏洞。本地攻击者可利用该漏洞通过当前目录下的Trojan木马tpfc.dll文件，获取特权。
solution:Upgrade vmware workstation to a higher version than 8.0.3,8.0,8.0.0.18997,8.0.1,8.0.1.27038,8.0.2,and avoid the version (,8.0.3],8.0,8.0.0.18997,8.0.1,8.0.1.27038,8.0.2; Upgrade vmware player to a higher version than 4.0.3,4.0,4.0.0.18997,4.0.1,4.0.2,and avoid the version (,4.0.3],4.0,4.0.0.18997,4.0.1,4.0.2; Upgrade vmware fusion to a higher version than 4.1.1,4.0,4.0.1,4.0.2,4.1,and avoid the version (,4.1.1],4.0,4.0.1,4.0.2,4.1; Upgrade vmware view to a higher version than 5.0,4.6.0,and avoid the version (,5.0],4.6.0; Upgrade vmware esx to a higher version than 4.1,5.0,and avoid the version 4.1,5.0