CVE-2014-3793 VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS is used, allows gues...
MediumCVSS 5.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS is used, allows guest OS users to gain guest OS privileges or cause a denial of service (kernel NULL pointer dereference and guest OS crash) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Fusion | = 6.0 | No fix listed |
| VMware Fusion | = 6.0.1 | No fix listed |
| VMware Fusion | = 6.0.2 | No fix listed |
| VMware player | = 6.0 | No fix listed |
| VMware player | = 6.0.1 | No fix listed |
| VMware Workstation | = 10.0 | No fix listed |
| VMware Workstation | = 10.0.1 | No fix listed |
| VMware esxi | = 5.0 | No fix listed |
| VMware esxi | = 5.0-1 | No fix listed |
| VMware esxi | = 5.0-2 | No fix listed |
| VMware esxi | = 5.1 | No fix listed |
| VMware esxi | = 5.1-1 | No fix listed |
| VMware esxi | = 5.5 | No fix listed |
References
- packetstormsecurity.com
- 58894 third-party-advisory
- 20140530 NEW VMSA-2014-0005 - VMware Workstation, Player, Fusion, and ESXi patches address a guest privilege escalation mailing-list
- 1030310 vdb-entry
- 1030311 vdb-entry
- www.vmware.com