PT-2015-4033 · Vmware · Vmware Player+3

Publicado 2015-01-29 · Atualizado 2017-09-08 · CVE-2014-8370

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.x through 10.0.4 VMware Player versions 6.x through 6.0.4 VMware Fusion versions 6.x through 6.0.4 VMware ESXi versions 5.0 through 5.5

Description The issue allows host OS users to gain host OS privileges or cause a denial of service by modifying a configuration file, potentially leading to arbitrary write to a file.

Recommendations For VMware Workstation versions 10.x through 10.0.4, update to version 10.0.5 or later. For VMware Player versions 6.x through 6.0.4, update to version 6.0.5 or later. For VMware Fusion versions 6.x through 6.0.4, update to version 6.0.5 or later. For VMware ESXi versions 5.0 through 5.5, update to a version later than 5.5.

Correção

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-8370

Produtos afetados

Vmware Esxi

Vmware Fusion

Vmware Player

Vmware Workstation

Referências · 12

• http://secunia.com/advisories/62669 · Nota
• http://secunia.com/advisories/62605 · Nota
• http://secunia.com/advisories/62551 · Nota
• http://jvn.jp/en/jp/JVN88252465/index.html · Nota
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000007 · Nota
• http://securityfocus.com/bid/72338 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8370 · Nota de Segurança
• http://securitytracker.com/id/1031642 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8370 · Nota
• http://securitytracker.com/id/1031643 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100933 · Nota
• http://vmware.com/security/advisories/VMSA-2015-0001.html · Aviso do Fabricante