PT-2018-17853 · Vmware · Vmware Fusion+1

Publicado 2018-08-15 · Atualizado 2018-10-15 · CVE-2018-6973

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 14.x before 14.1.3 VMware Fusion versions 10.x before 10.1.3

Description The issue is an out-of-bounds write vulnerability in the e1000 device, which may allow a guest to execute code on the host.

Recommendations For VMware Workstation versions 14.x before 14.1.3, update to version 14.1.3 or later. For VMware Fusion versions 10.x before 10.1.3, update to version 10.1.3 or later.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2018-6973

ZDI-18-1060

Produtos afetados

Vmware Fusion

Vmware Workstation

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2018-6973 · Nota de Segurança
• http://securitytracker.com/id/1041491 · Nota
• https://vmware.com/security/advisories/VMSA-2018-0022.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-6973 · Aviso do Fabricante
• http://securityfocus.com/bid/105094 · Nota
• https://zerodayinitiative.com/advisories/ZDI-18-1060 · Nota de Segurança