PT-2016-2014 · Vmware · Vmware Workstation+1

Published 2016-05-18 · Updated 2016-12-01 · CVE-2016-2077

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 11.x through 11.1.2 VMware Player versions 7.x through 7.1.2

Description The issue arises from incorrect access to an executable file, allowing users to gain host OS privileges. This can be exploited by an attacker to elevate their privileges. The estimated number of potentially affected devices is not specified.

Recommendations For VMware Workstation versions 11.x through 11.1.2, update to version 11.1.3 or later. For VMware Player versions 7.x through 7.1.2, update to version 7.1.3 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2016-01348

CVE-2016-2077

Affected Products

Vmware Player

Vmware Workstation

References · 5

• http://vmware.com/security/advisories/VMSA-2016-0005.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-2077 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01348 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-2077 · Security Note
• http://securitytracker.com/id/1035900 · Note