Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-8370

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service (arbitrary write to a file) by modifying a configuration file.

Published

2015-01-29T18:59:00.047

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.4 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

4.9

Weaknesses

Type: Primary
CWE-264

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	vmware	player	6.0	Yes
Application	vmware	player	6.0.1	Yes
Application	vmware	player	6.0.2	Yes
Application	vmware	player	6.0.3	Yes
Application	vmware	player	6.0.4	Yes
Application	vmware	fusion	6.0	Yes
Application	vmware	fusion	6.0.1	Yes
Application	vmware	fusion	6.0.2	Yes
Application	vmware	fusion	6.0.3	Yes
Application	vmware	fusion	6.0.4	Yes
Application	vmware	workstation	10.0	Yes
Application	vmware	workstation	10.0.1	Yes
Application	vmware	workstation	10.0.2	Yes
Application	vmware	workstation	10.0.3	Yes
Application	vmware	workstation	10.0.4	Yes
Operating System	vmware	esxi	5.0	Yes
Operating System	vmware	esxi	5.0	Yes
Operating System	vmware	esxi	5.0	Yes
Operating System	vmware	esxi	5.1	Yes
Operating System	vmware	esxi	5.1	Yes
Operating System	vmware	esxi	5.5	Yes

References

http://jvn.jp/en/jp/JVN88252465/index.html Third Party Advisory, VDB Entry ([email protected])
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000007 Third Party Advisory, VDB Entry ([email protected])
http://secunia.com/advisories/62551 ([email protected])
http://secunia.com/advisories/62605 ([email protected])
http://secunia.com/advisories/62669 ([email protected])
http://www.securityfocus.com/bid/72338 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1031642 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1031643 Third Party Advisory, VDB Entry ([email protected])
http://www.vmware.com/security/advisories/VMSA-2015-0001.html Patch, Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/100933 ([email protected])
http://jvn.jp/en/jp/JVN88252465/index.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000007 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/62551 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/62605 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/62669 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/72338 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1031642 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1031643 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2015-0001.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/100933 (af854a3a-2127-422b-91ae-364da2661108)