PT-2011-1001 · Vmware · Vmware Workstation+1

Published 2011-04-01 · Updated 2018-10-09 · CVE-2011-1126

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware VIX API versions prior to 1.10.3 VMware Workstation versions 6.5.x through 7.1.4 build 385536

Description The issue allows local users to potentially gain privileges via a Trojan horse shared library in an unspecified directory. This could enable an attacker to control the execution of the vmrun utility, which is used to perform various actions on virtual machines.

Recommendations For VMware VIX API versions prior to 1.10.3, update to version 1.10.3 or later. For VMware Workstation versions 6.5.x through 7.1.4 build 385536, update to a version after 7.1.4 build 385536.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2014-00005

CVE-2011-1126

Affected Products

Vmware Vix Api

Vmware Workstation

References · 13

• http://lists.vmware.com/pipermail/security-announce/2011/000131.html · Vendor Advisory
• http://vmware.com/security/advisories/VMSA-2011-0006.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00005 · Security Note
• http://secunia.com/advisories/43885 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1126 · Security Note
• http://vupen.com/english/advisories/2011/0816 · Vendor Advisory
• http://secunia.com/advisories/43943 · Vendor Advisory
• http://securityreason.com/securityalert/8173 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66472 · Note
• http://securityfocus.com/bid/47094 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1126 · Note
• http://securitytracker.com/id?1025270 · Note
• http://securityfocus.com/archive/1/517240/100/0/threaded · Note