Vulnerabilities > Vmware > Player > 5.0

DATE CVE VULNERABILITY TITLE RISK
2015-07-10 CVE-2015-3650 Improper Access Control vulnerability in VMWare Horizon View Client, Player and Workstation
vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x and 6.x before 6.0.7 and 7.x before 7.1.1, and VMware Horizon Client 5.x local-mode before 5.4.2 on Windows does not provide a valid DACL pointer during the setup of the vprintproxy.exe process, which allows host OS users to gain host OS privileges by injecting a thread.
local
low complexity
vmware CWE-284
7.2
2014-01-17 CVE-2014-1208 Local Denial Of Service vulnerability in Multiple VMWare Products
VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of service (VMX process disruption) by using an invalid port.
low complexity
vmware
3.3
2013-12-04 CVE-2013-3519 Permissions, Privileges, and Access Controls vulnerability in VMWare products
lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a crafted memory allocation.
7.9
2013-11-18 CVE-2013-5972 Permissions, Privileges, and Access Controls vulnerability in VMWare Player and Workstation
VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via unspecified vectors.
local
low complexity
vmware CWE-264
7.2
2013-08-24 CVE-2013-1662 Permissions, Privileges, and Access Controls vulnerability in VMWare Player and Workstation
vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsb_release binary in a directory in the PATH, related to use of the popen library function.
local
vmware CWE-264
6.9