CVE-2014-1209 VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution....
HighCVSS 9.3
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vsphere client | = 4.0 | No fix listed |
| VMware vsphere client | = 4.1 | No fix listed |
| VMware vsphere client | = 5.0 | No fix listed |
| VMware vsphere client | = 5.1 | No fix listed |
References
- www.vmware.com vendor-advisory