NetSight
high7.9

CVE-2013-3519

lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ES…

Impact

lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a crafted memory allocation.

Affected products

VendorProductAffected versions
VmwareEsxi
Versions 4.0, 4.1, 5.0, 5.1
VmwareWorkstation
Versions 9.0, 9.0.1, 9.0.2
VmwareEsx
Versions 4.0, 4.1
VmwarePlayer
Versions 5.0, 5.0.1, 5.0.2
VmwareFusion
Versions 5.0, 5.0.1, 5.0.2, 5.0.3

Weakness classification

References