PT-2016-2014 · Vmware · Vmware Workstation+1

Publicado 2016-05-18 · Atualizado 2016-12-01 · CVE-2016-2077

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 11.x through 11.1.2 VMware Player versions 7.x through 7.1.2

Description The issue arises from incorrect access to an executable file, allowing users to gain host OS privileges. This can be exploited by an attacker to elevate their privileges. The estimated number of potentially affected devices is not specified.

Recommendations For VMware Workstation versions 11.x through 11.1.2, update to version 11.1.3 or later. For VMware Player versions 7.x through 7.1.2, update to version 7.1.3 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2016-01348

CVE-2016-2077

Produtos afetados

Vmware Player

Vmware Workstation

Referências · 5

• http://vmware.com/security/advisories/VMSA-2016-0005.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-2077 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-01348 · Nota de Segurança
• http://securitytracker.com/id/1035900 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-2077 · Nota de Segurança