Vulnerabilities > CVE-2014-2384 - Resource Management Errors vulnerability in VMWare Player and Workstation

047910
CVSS 4.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
local
low complexity
vmware
CWE-399

Summary

vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation and system crash) via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as non-exploitable."

Vulnerable Configurations

Part Description Count
Application
Vmware
2

Common Weakness Enumeration (CWE)