Vulnerabilities > Vmware > Workstation > 9.0

DATE CVE VULNERABILITY TITLE RISK
2014-08-28 CVE-2014-4200 Permissions, Privileges, and Access Controls vulnerability in VMWare Tools, Vm-Support and Workstation
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive.
local
vmware CWE-264
4.7
2014-08-28 CVE-2014-4199 Link Following vulnerability in VMWare Tools, Vm-Support and Workstation
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.
local
vmware CWE-59
6.3
2014-01-17 CVE-2014-1208 Local Denial Of Service vulnerability in Multiple VMWare Products
VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of service (VMX process disruption) by using an invalid port.
low complexity
vmware
3.3
2013-12-04 CVE-2013-3519 Permissions, Privileges, and Access Controls vulnerability in VMWare products
lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a crafted memory allocation.
7.9
2013-11-18 CVE-2013-5972 Permissions, Privileges, and Access Controls vulnerability in VMWare Player and Workstation
VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via unspecified vectors.
local
low complexity
vmware CWE-264
7.2
2013-08-24 CVE-2013-1662 Permissions, Privileges, and Access Controls vulnerability in VMWare Player and Workstation
vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsb_release binary in a directory in the PATH, related to use of the popen library function.
local
vmware CWE-264
6.9
2013-02-11 CVE-2013-1406 Improper Input Validation vulnerability in VMWare products
The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors.
local
low complexity
vmware microsoft CWE-20
7.2