Vulnerabilities > Vmware > Workstation > 9.0.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2014-08-28 | CVE-2014-4200 | Permissions, Privileges, and Access Controls vulnerability in VMWare Tools, Vm-Support and Workstation vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive. | 4.7 |
2014-08-28 | CVE-2014-4199 | Link Following vulnerability in VMWare Tools, Vm-Support and Workstation vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp. | 6.3 |
2013-12-04 | CVE-2013-3519 | Permissions, Privileges, and Access Controls vulnerability in VMWare products lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a crafted memory allocation. | 7.9 |
2013-11-18 | CVE-2013-5972 | Permissions, Privileges, and Access Controls vulnerability in VMWare Player and Workstation VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via unspecified vectors. | 7.2 |
2013-08-24 | CVE-2013-1662 | Permissions, Privileges, and Access Controls vulnerability in VMWare Player and Workstation vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsb_release binary in a directory in the PATH, related to use of the popen library function. | 6.9 |