CVE-2012-1666

CVE-2012-1666 is an untrusted search path vulnerability in VMware Tools, affecting VMware Workstation, Player, Fusion, View, and ESX. A local attacker can exploit this by placing a malicious tpfc.dll file in the current working directory, leading to privilege escalation. The vulnerability has a CVSS score of 6.9 (high severity) due to its local attack vector, medium complexity, and complete impact on confidentiality, integrity, and availability. While not listed in CISA's KEV, an ExploitDB entry exists for a similar ThinPrint vulnerability, and there is no evidence of active exploitation or significant community discussion for CVE-2012-1666 itself.