PT-2015-5035 · Vmware · Vmware Player+2

Published 2015-01-29 · Updated 2017-09-08 · CVE-2015-1044

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.4 VMware Player versions 6.0.0 through 6.0.4 VMware ESXi versions 5.0 through 5.5

Description The issue allows attackers to cause a denial of service in the host OS via unspecified vectors. This is related to the VMware authorization process.

Recommendations For VMware Workstation versions 10.0.0 through 10.0.4, update to version 10.0.5 or later. For VMware Player versions 6.0.0 through 6.0.4, update to version 6.0.5 or later. For VMware ESXi versions 5.0 through 5.5, update to a version later than 5.5.

Fix

Related Identifiers

CVE-2015-1044

ZDI-15-031

Affected Products

Vmware Esxi

Vmware Player

Vmware Workstation

References · 11

• https://zerodayinitiative.com/advisories/ZDI-15-031 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-1044 · Security Note
• http://vmware.com/security/advisories/VMSA-2015-0001.html · Vendor Advisory
• http://securitytracker.com/id/1031646 · Note
• http://secunia.com/advisories/62669 · Note
• http://securityfocus.com/bid/72336 · Note
• http://secunia.com/advisories/62551 · Note
• http://secunia.com/advisories/62569 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100935 · Note
• http://securitytracker.com/id/1031645 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1044 · Note