PT-2015-5034 · Vmware · Vmware Player+2

Published 2015-01-29 · Updated 2017-09-08 · CVE-2015-1043

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.4 VMware Player versions 6.0.0 through 6.0.4 VMware Fusion versions 6.0.0 through 6.0.4 VMware Fusion versions 7.0.0

Description The issue allows guest OS users to cause a denial of service in the guest OS. This is due to a problem in the Host Guest File System (HGFS) in the specified VMware products.

Recommendations For VMware Workstation versions 10.0.0 through 10.0.4, update to version 10.0.5 or later. For VMware Player versions 6.0.0 through 6.0.4, update to version 6.0.5 or later. For VMware Fusion versions 6.0.0 through 6.0.4, update to version 6.0.5 or later. For VMware Fusion version 7.0.0, update to version 7.0.1 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-1043

Affected Products

Vmware Fusion

Vmware Player

Vmware Workstation

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2015-1043 · Security Note
• http://vmware.com/security/advisories/VMSA-2015-0001.html · Vendor Advisory
• http://securityfocus.com/bid/72337 · Note
• http://secunia.com/advisories/62551 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1043 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100934 · Note
• http://securitytracker.com/id/1031644 · Note