CVE-2014-8370 VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial....
MediumCVSS 6.4
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service (arbitrary write to a file) by modifying a configuration file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware player | = 6.0 | No fix listed |
| VMware player | = 6.0.1 | No fix listed |
| VMware player | = 6.0.2 | No fix listed |
| VMware player | = 6.0.3 | No fix listed |
| VMware player | = 6.0.4 | No fix listed |
| VMware Fusion | = 6.0 | No fix listed |
| VMware Fusion | = 6.0.1 | No fix listed |
| VMware Fusion | = 6.0.2 | No fix listed |
| VMware Fusion | = 6.0.3 | No fix listed |
| VMware Fusion | = 6.0.4 | No fix listed |
| VMware Workstation | = 10.0 | No fix listed |
| VMware Workstation | = 10.0.1 | No fix listed |
| VMware Workstation | = 10.0.2 | No fix listed |
| VMware Workstation | = 10.0.3 | No fix listed |
| VMware Workstation | = 10.0.4 | No fix listed |
| VMware esxi | = 5.0 | No fix listed |
| VMware esxi | = 5.0-1 | No fix listed |
| VMware esxi | = 5.0-2 | No fix listed |
| VMware esxi | = 5.1 | No fix listed |
| VMware esxi | = 5.1-1 | No fix listed |
| VMware esxi | = 5.5 | No fix listed |
References
- JVN#88252465 third-party-advisory vdb-entry
- JVNDB-2015-000007 third-party-advisory vdb-entry
- 62551 third-party-advisory
- 62605 third-party-advisory
- 62669 third-party-advisory
- 72338 third-party-advisory vdb-entry
- 1031642 third-party-advisory vdb-entry
- 1031643 third-party-advisory vdb-entry
- www.vmware.com patch vendor-advisory
- vmware-cve20148370-priv-esc(100933) vdb-entry