VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a crafted application.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Player | Vmware | 4.0 (including) | 4.0 (including) |
| Player | Vmware | 4.0.0.18997 (including) | 4.0.0.18997 (including) |
| Player | Vmware | 4.0.1 (including) | 4.0.1 (including) |
| Player | Vmware | 4.0.2 (including) | 4.0.2 (including) |
| Player | Vmware | 4.0.3 (including) | 4.0.3 (including) |
| Player | Vmware | 4.0.4 (including) | 4.0.4 (including) |
| Workstation | Vmware | 8.0 (including) | 8.0 (including) |
| Workstation | Vmware | 8.0.0.18997 (including) | 8.0.0.18997 (including) |
| Workstation | Vmware | 8.0.1 (including) | 8.0.1 (including) |
| Workstation | Vmware | 8.0.1.27038 (including) | 8.0.1.27038 (including) |
| Workstation | Vmware | 8.0.2 (including) | 8.0.2 (including) |
| Workstation | Vmware | 8.0.3 (including) | 8.0.3 (including) |
| Workstation | Vmware | 8.0.4 (including) | 8.0.4 (including) |
References
- http://osvdb.org/87118
- http://www.securityfocus.com/bid/56469
- http://www.vmware.com/security/advisories/VMSA-2012-0015.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79924
- http://osvdb.org/87118
- http://www.securityfocus.com/bid/56469
- http://www.vmware.com/security/advisories/VMSA-2012-0015.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79924